To be honest, I think we should do decentralized custom repositories and AUR hosting
Wild, but expected. AUR (Arch Linux User Repository) pushes completely disabled atm due to influx of malware. I predicted widespread temporary shutdowns of major package repositories earlier this year. looks like it's happening!