This one off the reasons why Debian (and others) are working hard on reproducible builds. That would allow you pull the source code and rebuild a package to ch

This one off the reasons why Debian (and others) are working hard on reproducible builds. That would allow you pull the source code and rebuild a package to check it matches the official one, theoretically you could setup build mirrors and match them automatically against what the Debian mirrors are serving.