Comment by Foxboron

Depends on what you deem "vetted". Builds from source from a trusted source. Try ask if they can PGP sign their sources. Builds fine. Pushed to the repos. If its an package from core or extra it goes through testing for a few days.

Also been a push towards reproducible builds, and the stones have been laid with pacman 5.1.