This is not only dangerous, as there is no guarantee what is in there, but also breaks open source initiatives.
They add no value but ask money for it, and if there is something wrong with it than the users most likely come to us. This costs us time, and we get nothing for it.