Better way

There is a better way to determine whether software is trustworthy, without relying on digital certificates issued by faceless absentee corporations: read the Source Code!

If you can't understand it yourself, then show it to a competent programmer whom you trust and ask them what they think. Get it straight from the horse's mouth.

But always insist on the Source Code. It's the only guarantee you've got.