agree. FOSS needs massive security and auditing on packages. nostr:npub1235tem4hfn34edqh8hxfja9amty73998f0eagnuu4zm423s9e8ksdg0ht5 is best right now, but there needs to be a clear hard core auditing of Debian etc