Very nice initiative I hadn't run across before. Some of these are likely to be false positives, but it's definitely a good move to mass-check for this kind of thing— the Debian archive should be trustworthy, not something like the iOS or Google Play stores where you can assume the average app is piled with phone-home spyware.