External package sources must prove trustworthy in the future. It also features a Linux sandbox and a faster default API.