I'm with you 100%. Drop the package. It's a trust issue (and a bad one
at that).
--
Peter S. Galbraith, Debian Developer <psg@debian.org>
http://people.debian.org/~psg
GPG key 1024/D2A913A1 - 97CE 866F F579 96EE 6E68 8170 35FF 799E