FreeOTP is what you’re talking about, right? It’s “Maintained by RedHat, and based on Google Authenticator.” So it’s under the control of a major open source group. I wouldn’t be worried. It’s not like or Firefox, where fork developers have to play catch-up.