Right, and that's where option 2 comes in. You can download the source code, read it yourself or get a competent, trusted friend to read it, confirm that it isn't doing anything malicious, compile and run it.