I wrote an article about a year ago on why Chocolatey is just broken, pretty much all of the issues are still there except a bandaid here and there,
https://medium.com/@keivan/why-chocolatey-is-broken-beyond-a...
You wrote that the Chocolatey Gallery had no formal review process, and in the same month (October 2014), a formal review process was introduced. The community feed on the Chocolatey Gallery has had moderation of packages since October 2014. I shared that information with you at the time we changed the security model in 2014, so I'm slightly disappointed that you failed to acknowledge that aspect has been fixed.