I wonder which ones have the best vetting. And if it is adequate. I also wonder about other packaging systems. CPAN, pip (pypy?) AUR and so on. It doesn't surp

I wonder which ones have the best vetting. And if it is adequate. I also wonder about other packaging systems. CPAN, pip (pypy?) AUR and so on. It doesn't surprise me to see this happen. I wonder what other surprises might be in any of these packages. FWIW, I'm running mostly Debian and some Ubuntu. I always prefer to install packages via the package manager rather than directly from some tool specific repository because I'll get automatic updates and some level of testing/vetting.