Also using Keepassxc. However, I really would love to have sth audited and with a documented threat model. I have the feeling that those programs are developed

Also using Keepassxc. However, I really would love to have sth audited and with a documented threat model. I have the feeling that those programs are developed by enthusiasts and probably would not withstand a serious attack (but this not really the typical family worries about neither do I)