If you want that you can always use vetted package repositories like Nexus. Many companies do.