How to know if a package is good?

We could bring telemetry back into discussion.