Some of the supposed selling points on the pkgx the website are that they "build new releases almost immediately" and "add everything that people want without qualms", which seems to imply pretty lax quality control. Given that they apparently consider AI-generated garbage appropriate in package descriptions and issue comments, I would be even more wary. Is anyone checking that packages don't include malware?