[Proposal] Setup a mechanism to prevent spam on pub

Today I saw a spam package got uploaded on pub. dev, https://pub.dev/packages/eternals_2021_full_hd_online_for_free_at_home There should be some mechanism to keep the pub ecosystem hygienic. I am not sure if there is any mechanism already set up.

but, I would like to propose having a `downvote` button or `vote for delete` system where after a certain number of downvotes or delete requests from community members the package should undergo a review from the pub maintainers and appropriate action should be taken on it.

On a side note, the package author seems to have the freedom to add any repository URL, it would be great if the ownership of the repo can be authenticated.

Thanks

Start by reviewing the existing pub.dev package publication and moderation flows; the issue does not identify files, tests, or an existing mechanism. Use the linked spam package as a concrete example, then define the scope and acceptance criteria for community reporting, maintainer review, and repository ownership authentication.

Written by the indexing model from the issue text.