– Download only from the official website, a trusted repository (e.g., GitHub releases, a university server), or a vendor‑approved portal.