Yes and no. Popularity or user base and number of engineers looking at the code are probably correlated, but there are definitely exceptions, like:

* small NPM packages depended on by popular ones

* video game mods and tools

* open source end user utilities