[woodruffw]

They are very fundamentally different solutions: the entire premise of distribution packaging is that you’re relying on some distribution maintainer’s discretion. It’s not an open index.

[oneshtein]

This is exactly what users wants in this case: someone need to check a package and mark it as safe to use.