> Debian has a relatively small set of trusted package maintainers and doesn't let just anyone put code in the official distribution There are presently 2619 o

> Debian has a relatively small set of trusted package maintainers and doesn't let just anyone put code in the official distribution There are presently 2619 official Debian maintainer GPG keys[1]. Considering the scope, that's not ridiculous, but I wouldn't call it small. [1] http://ftp.debian.org/debian/pool/main/d/debian-keyring/ http://ftp.debian.org/debian/pool/main/d/debian-keyring/