3 ms·

If only developers were required by package managers to sign packages with their own keys, and users warned on signature changes...