In our custom apt repositories we have...
- Packages built from gerrit that we wrote
- Packages built from gerrit where the code in gerrit is a fork
- Packages built from upstream source, nothing in gerrit
- Packages we didn't built but just grabbed from another source
Reprepro doesn't know where they came from, or care. So... it would great to have a systematic system for recording where a given package came from, who built it, and how it was built.