If you don't trust the developer (probably a stranger for you), why you can trust another stranger who analyze the source code for you?

I think the best way is to learn how the code works by yourself.