The average distro package maintainer is not reviewing the underlying code changes in packages to determine if they are malicious, nor is the average disto pack

The average distro package maintainer is not reviewing the underlying code changes in packages to determine if they are malicious, nor is the average disto package maintainer qualified to spot intentionally obfuscated malicious code. The the average distro package maintainers is “person who cares that package repos stay up to date and is willing to commit their time to that work”