[Enk1du]

For those who want the comparison, CPAN is Perl's npm or PyPI and is having to deal with the same issues of security and verification. Hope they get it right.