Packages come with ‘pre-scandal reputation audits’ to catch a problem before someone else does. Is this a logical next step, or a sign of the victory of obfuscation?