I totally agree with the topic.  This is why I like new blockchain projects that use existing technology as their foundation.  If you are building a PoS sidechain for example, and you are using Tendermint, I feel a lot more comfortable than someone that just created a new byzantine fault tolerant concensus algorythm from scratch.

This is because I already reviewed Tendermint's code and can focus only on the business code of that new project, rather than the blockchain code itself.

Oh, and I prefer if they use dependencies over forks.  Forks can be easily manipulated to inject vulnerable code.  Dependencies uses the code that is in the git repository of the project maintainers.

Thanks,
Steve