I might frontpage the question if it was clearer... =)

Is it about (irrelevant) dependencies or avoiding trojans or what exactly?