"Unverified uploader" seems unnecessarily alarming

I feel that the way that pub.dev lists packages from unverified publishers is now unnecessarily alarming. It lists just "Unverified uploader", but obviously not all unverified publishers are equal. [`package:charcode`](https://pub.dev/packages/charcode) is owned by lrhn. For whatever reason he is unverified, yet I obviously would consider it more trustworthy than some other random package from some other random unverified publisher. (For that matter, I'd trust it more than most verified publishers.) Although a verified publisher (and package score and popularity) increases confidence, "Verified" != "Trustworthy".

There's no easy way from pub.dev's package page to determine trustworthiness. All packages from unverified publishers now look the same, and I have to click on the GitHub repository to see who actually owns and maintains the package. That isn't great either since I am guessing that it's possible for someone to upload a package that claims to correspond to someone else's GitHub repository. Arguably it's worse than when the uploader's email address was displayed since I at least could trust that the uploader owned the email address (I think?).

I've also seen at least [one package become discontinued](https://pub.dev/packages/unicode) because the author didn't want to bother becoming a verified publisher.