I use Arch and only official sources, that are checked over and signed by a small well-trusted team[1]. Nothing like npm's model. [1]: https://www.archlinux.or

I use Arch and only official sources, that are checked over and signed by a small well-trusted team[1]. Nothing like npm's model. [1]: https://www.archlinux.org/master-keys/ https://www.archlinux.org/master-keys/