@dcc See, modern distributions have more stuff in officially vetted repositories and the people maintaining that stuff go through a lucrative process to become a maintainer of the popular distros repos, and then they have to submit stuff like GPG keys and such and now it's easy to rely on these things with little worry.

Slackbuilds and other community repositories probably don't have such a bulletproof process and there are thousands of maintainers with Gmail/yahoo addresses and that makes me uncomfortable.