@fal1026 There's a few "reputable" sources if you don't mind a crypto miner during the install process. The community more or less polices its own so anyone that's been caught putting in rrats or day 0 exploits into a system tends to get ostracized.