- [ ] compile and run it, see if it is easy to contact the dev via it

- [ ] see what os calls it performs, verify nothing is blatantly put on network

- [ ] compare checksums of included binaries

or

- use argument with grarpamp: argument against software has as many or more sketchy parts as the points it is making against the software