you're gonna clown on my for this but some (free) anti-virus apps have Hash reputation checks
especially useful for programs that are not signed due to the dev not having the money to do it
it's a pretty good indicator that others have used the thing with no issues
since I'm paranoid even with open source stuff it gives me some peace of mind