An useful intermediate step, but ultimately, a wrong move. Packages will keep having the essential problem that there's no guarantee whatsoever that the packag

An useful intermediate step, but ultimately, a wrong move. Packages will keep having the essential problem that there's no guarantee whatsoever that the package was derived from the advertised source. Plenty of chance for delivering malicious code.