This seems like a big argument for centralized repos like Ubuntu's/Debian's Apt-get or the Apple app store. I was never aware this was even a problem because a

This seems like a big argument for centralized repos like Ubuntu's/Debian's Apt-get or the Apple app store. I was never aware this was even a problem because all my software came in through one or two trusted sources.