does karabiner elements on Mac OSX contain or potentially contain malware?

Question

I'm using Karabiner elements, an open-source program to remap the keys on my macbook air (running the latest Mac OSX High Sierra) and my apple wireless keyboard. It works very nicely.

However, I am concerned about the off chance that a malicious adversary can possibly use it to record keystrokes and passwords. This question was already asked on a Google Groups thread, and the creator of Karabiner answered. While there doesn't appear to be any reason to suspect that the creator of the program has anything other than good intentions, I would feel a lot more comfortable with a more independent assessment of this question.

Some further info: the Github page for the project has a decent number of contributors, and the creator of the program appears to be someone who I have no reason so far to suspect. However, I'm not as experienced in the world of open-source software development as some others here may be, so I was hoping someone with a better background can shed some light on this issue.

Answer 1

first let me just say; I am not sure anyone here would be willing to read through it but my advice would be:

1: read through the bug reports

2: google information on it and read as many reviews as you can. it has a lot of eyes on it, but yea easy to be sceptical.

3: you could always sandbox it and monitor it, but still not a sure way.

Long story short, unless a you read the code your self or find someone reviewing the code via google you will just have to go with your gut. it has a fair amount of popularity.

not a lot of people read the source code of something open source, because its open source and they automatically trust it. So it is good you are sceptical, open source does not mean safe as you seem to be aware.