Check their team members, if bounty program is run by good people you feel safe. I suggest needmoney and Tokensuite team's projects. They are fairly new in this business but they try to do their best. I join their campaign lately, they fix problems eventually.
Good bounty program not only depend on the team manager bounty. You have to remember it still depends on what project you want to promote. If you promoted a scam project, finally, you just get worthless coin and waste your time to work in that project.