I've been battling the same issue. Using closed-source from a private company is a huge mistake if you care about security and privacy. Open-source, though arguably not thst much more secure, has one benefit over closed source from a private company: paid programmers are expensive. What's their motive for paying people to do this? Money. Is the root software free/cheap? Don't use it. Open Source, on the other hand, though while not totally free from malicious additions, is being handled mostly by programmers who, collectively, want to use the software they are helping create. That being said, here's what I've mustered up.
Most actively developed is by this guy, phhusson, who posted an article (https://www.xda-developers.com/the-importance-of-open-source-in-root/) about it in 2015. Then started this (still active) thread (https://forum.xda-developers.com/android/software-hacking/wip-selinux-capable-superuser-t3216394/page246)
Here's the repo:
Both of these are still under heavy development.