It’s open source: If the government’s are willing to pay people to fork the original and vet and merge all the future deltas then they just need to host their o

It’s open source: If the government’s are willing to pay people to fork the original and vet and merge all the future deltas then they just need to host their own package manager. But would developers trust a government managed set of packages? In the US that is doubtful (I’d assume at some point FBI, CIA, NSA, DOD do something dishonest with it at some point.)