True that, and I've seen packages switch group ids at this point, usually at a major version release. But still makes it easier to verify that you're installin

True that, and I've seen packages switch group ids at this point, usually at a major version release. But still makes it easier to verify that you're installing the package you intended. And makes it very hard to deliver typo vulns or squat the "good" names.