As a user of npm I'd really like to see some effort to create a framework for trust in open(ish) repositories. Something that includes signing, reputation (beyo

As a user of npm I'd really like to see some effort to create a framework for trust in open(ish) repositories. Something that includes signing, reputation (beyond "popularity"), trust network (people that vouch for your packages), automated verification to check for obfuscation, etc. I mention npm because it's always in the news, and because it's a much smaller and simpler problem that a whole App Store. If we could fix something like npm the solution could perhaps be generalized or built on to open trustworthy repos for all kinds of content. At that point we would have a very strong working argument against privately-run monopolistic app stores. Until then I prefer Apple as a benevolent dictator to mad-max style libertarianism. I need to use Adobe software for professional reasons, but I'd rather not have to deal with an Adobe app store... or an EA app store... or an Ubisoft app store... or apps stores from a variety of shitty companies with bad practices.