It's a bit shifty though, the packages are all over the place and you need to actually look for and vet package vendors instead of just trusting one for-profit company to handle it all and not enshittify.