Relatively low risk, these are open-source projects with fairly significant userbases of technical users who can and do call out troubling code if it’s present.

While you are doing so at your own risk, sideloading isn’t inherently risky.