There’s various efforts within Debian to reconcile with, for example, the module signing system. I piloted the module signing system in CPAN, in the Comprehensive Perl Archive Network.