> How do I know I can trust the index will not suddenly impose draconian rules or abscond with all the assets wholesale? You can’t. Look at what happened to fr

> How do I know I can trust the index will not suddenly impose draconian rules or abscond with all the assets wholesale? You can’t. Look at what happened to freenode where the admins sold rights to the server to a private buyer who immediately implemented strict controls on how channels operated. The same trust problem that PyPI are trying to solve with maintainers of critical packages applies to the index itself.