I did not need to audit the software, I just used it. Moving from the base that I trusted electrum on the wisdom of the crowd knowing it had no reported hacks over many years I started there and imported my private keys.