Aware of that. So how is that different from any other Debian package? If you rely on a certain set of packages, you are always at the end at fault. You either

Aware of that. So how is that different from any other Debian package? If you rely on a certain set of packages, you are always at the end at fault. You either trust a certain base or you vet it.