How to verify that the code in this open source tool doesn't misuse your Google Account credentials?

This Chrome scraping tool has open sourced its code here:

https://github.com/mnmldave/scraper

开发者_StackOverflow

How would one verify that the code in this tool doesn't misuse your Google Account credentials when it uploads the scraped data to Google Spreadsheets?

---

Code uses oAuth for authentication, so software won't store your user/pass itself.

It will require permissions to various Google services that are linked to your account.

For example if it requests Google Contacts permission and you don't want to share your contact list with the program, then don't grant an access.