Is there any guarantee that yum (et. al.) packages are audited?