It isn’t a random, sketchy or inherently untrustworthy site.

You shouldn’t have any issue explaining how you would go about verifying that a software repo is trustworthy and how that differs from verifying a website.

Unless you don’t actually know what you’re talking about…