Package managers have an integrity problem

6 points by equeue