You get this type of security inherently via most os-level packagers which check upstream tarballs especially the ports-like ones which are primarily designed f

You get this type of security inherently via most os-level packagers which check upstream tarballs especially the ports-like ones which are primarily designed for from-source usage. Unfortunately there has been a trend to ignore these and install directly of late, especially for dynamic language modules.