Towards the evaluation of OSS trustworthiness: lessons learned from the observation of relevant OSS projects