We deal with a lot of customer information including name, address, SSNs, etc. are we are using a new setup with Full admin machines that have access to the databases where the information is stored.
We need a way to tell if packages installed via Visual Studios Nuget Package Manager is safe to use on confidential customer information.
From what I know, is that anybody can contribute to Nuget and could possibly introduce malicious code.
Is there an trusted and well known institution/source that verifies Nuget Packages as safe, or is there a vetting process that companies can go through to ensure the safety of these packages without looking through the entire source code??