Quick reply... What is the part that you do not trust: the compiler or the code? If compiler, then compile it yourself, like Gentoo, or feed it to a trusted builder. If code, then read it, or wait for the developers whom you trust to read it. Best wishes.