Took me a while to explain why it is so important that the source files for some programs should be available to the public before you ever consider using them. A personal password database like keepass for example is such software. And so that its possible to gcc the thing yourself. And so you know what that program does and what it doesn’t before compiling and using it. But of course nobody expects you to be able to read code. There’s a legion of hackers out there that will read the code for you if its available publicly. They will ring a bell if your convenient handy password database proggy does more then it should do.