[darkwater]

If you are so worried by that you can setup a private repository. It's just a glorified HTTP server...

[tombert]

I've debated trying to run my own Nixpkgs just because I think it would be fun, but I've talked myself out of it because I'm afraid that maintaining it would become a full time job.