Methods to detect and avoid from purchasing risky software products have been created by CISA, NIST and NASA along with specific guidance on how to identify trustworthy software products and devices ...