For now, I'm using "disconnect" - downloaded it, read the whole sources and installed it from a local directory. That's my level of paranoia right now.