When you study integrity of maintainers across multiple distro package managements (dnf, rpm, apt, zypper, yum, pip, flatpak, snap, homebrew), you will see that

When you study integrity of maintainers across multiple distro package managements (dnf, rpm, apt, zypper, yum, pip, flatpak, snap, homebrew), you will see that most have maintainer integrity issues. Orc (orchestra) too. Only one that nailed this is portage (BSD and Gentoo Linux).