However you frame it, a very widely used package management system based essentially on trust and a community that doesn't expect any amount of responsibility w

However you frame it, a very widely used package management system based essentially on trust and a community that doesn't expect any amount of responsibility with regards to those packages seems like a bad combination.