I would like to see a good open source package manager, built on the following principles: - every package is a source code archive signed by the developer -

I would like to see a good open source package manager, built on the following principles: - every package is a source code archive signed by the developer - package manager takes care of compiling it for you - package manager does not allow build scripts to download extra code or libraries - dependencies are built from source by the manager, not downloaded as binaries - there is a rating system to allow packages with obfuscated code to be dismissed