Before installing new software, I usually visit its GitHub page or Wikipedia entry first and click through to the official site from there. I just don't trust the 'official' sites that pop up in Google search results. How many of you do the same?

Don't forget the SourceForge rug pull, when the once definitive central source of truth was bought out and became a venue for malware