> Packages taken over include misspelling of urllib. What exactly do you propose as an alternative here? 1. Similar way of identifying who is responsible for a

> Packages taken over include misspelling of urllib. What exactly do you propose as an alternative here? 1. Similar way of identifying who is responsible for a package to Debian style repo - would allow those affected to identify a named person if malicious code added. 2. Fuzzy matching of package names (so taking the library name urllib also takes urilib, urlib, urllib2 and other names with a short document distance). 3. Built in mechanism to allow third party reviews within the repositories infrastructure.