In general, traditionally there are underappreciated curators that take on the role of keeping a named package or program consistent, and may go though a personal validation process with a OS build organization to provide a chain of accountability for the user-base.
The amount of abuse these people endure from general users is a classic rerun. =3