All mirrored repositories are regularly scanned with ClamAV for known malware signatures.
This scan detects known supply chain attacks, trojans and other malware in mirrored files.
Hinweis: This scan does not replace GPG signature verification by the package manager.
It is an additional security layer, not a replacement for official package verification.