I hate being this person, but this title might make more sense if it was "Walk, a Terminal File Manager." I clicked through thinking it'd be something like a walkthrough of terminal file management.
I often see all these fantastic CLI enhancements and tools that I am always tempted to try.
However, I have an overwhelming fear that doing so would compromise my system and those that I connect to through countless and unpredictable ways. And even if can 100% trust the author/maintainer, they may still one day become subject to a supply-chain attack or similar.
I feel marginally better if they're integrated into another, more popular means of distribution (terminal app, brew, etc), but still feel rather uneasy.
I'd go take a look at the Suckless stack of software [0]. All of their apps are short enough to read through (one of them) in a single sitting. You can maintain your own branch, and add in features as and when you need them.
For a file manager I would just use mc and it is available on most servers. en.wikipedia.org/wiki/Midnight_Commander
It rarely makes sense to install another app, especially if it is proprietary. Just checked out termius.com a ssh manager. With a monthly subscription? 10 USD a month, a steal!
I used to struggle with this too, but now I look at it this way: you're always at risk of being breached when connecting to the Internet (zero days in Browser, Router, maybe IoT devices on the local network, supply chain attack of some installed software, router, ...). Everything you add to your system/network adds attack surface. But: somewhat popular github projects are usually low risk, because 1) enough people are looking into it to be reasonably sure there's nothing funny in the code base, 2) it's not big enough to be an instetesting targeted for malicious actors.
I think a big part of why it feels scary is the unpredictability you mention. You don't know how you would be compromised and whether you would even notice. Sure you could get comprised and then spread the infection, but it's extremely hard to build malware like that. The much more likely scenario is the that the malware tries to steal crypto or encrypts your files. The chances that something really bad would happen are very slim (Do you even have large amounts of crypto? Do you not have any backups of important files?). In the end that's just a risk you'll have to live with (when connecting to the Internet) just like you're at risk of getting hit by a car when going outside.
NNN has a lot more features and is very customizable. Most NNN users graduate to using it as a small file scripting system through use of plugins. Walk looks minimalist on purpose (which is nice for people that don't need all that NNN has to offer).
I made a quick tutorial on NNN showing off the power of its plugin system if anyone is interested. It's become a bedrock tool for me.