It's open source. Anyone can audit it. You can create your own sources.list, but if you distribute it, you must open the code. Also, "wid info <package_name>" shows the exact URL it downloads from. Example: wid info llvm shows the official GitHub release link.
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
replies: