A decentralized package registry.

Is there a solution that allows for decentralization in the package registry space? Is it a good idea, at all?