right, we'll trust the release process of every open source project on github