No currently there is no check. But most packages are open source ofcourse. I think that so far Umbraco was pretty niche and we'd be happy with any package in the marketplace at all. But especially with AI now, we might come to a point where we need more security. Maybe you should need an account for the marketplace to post. Or we should scan for malware by default. I don't know yet what I feel is appropriate.