How can contributors to open-source communities be trusted? On the assumption, inference, and substitution of trust · Study