I think you miss the entire point of open source. It’s not that one is good or bad, it’s that one can be verified. Developers are welcome to publish their software however they want, but misrepresenting packages is disingenuous