They are very fundamentally different solutions: the entire premise of distribution packaging is that you’re relying on some distribution maintainer’s discretion. It’s not an open index.
This is exactly what users wants in this case: someone need to check a package and mark it as safe to use.
This is exactly what users wants in this case: someone need to check a package and mark it as safe to use.