You can’t. Really, it’s impossible to vet everything. I use littlesnitch and ClamXav as an extra security measure, along with what the OS brings but as far as

You can’t. Really, it’s impossible to vet everything. I use littlesnitch and ClamXav as an extra security measure, along with what the OS brings but as far as CLI third party tools go, we are all blind: pip, npm, gems, random prexompiled go apps, docker containers and te list goes on and on...