Which, people should never ever do either. Maybe as a SWE I'm too removed from other people's use cases but I cannot recall the last time I ran an executable on my computer that didn't go through a centralized inspection. Be it me myself, or Debian team etc...
So the dephell maintainers should go through the Debian team or similar in order to distribute? Good grief...
No, I can read the source code. I'd be 100% fine if they advertised people to run `curl xyz; nano xyz; python3 xyz`. The stupid&dangerous part is `|python3`. It allows people to run arbitrary code in your machine.
If people can’t figure out how to do that on their own, they aren’t going to be equipped to detect issues in the source anyway.
What are your feelings on adding third-party PPAs?