I have many PPAs installed on my Trusty system. However, I feel that they might try to sneak packages into my system other than those which I include them in the first place. Technically, after adding a PPA, there's nothing preventing this PPA to try and sneak 'upgrades' for critical software into my system.
I know that I can in principle use apt-pinning to allow only certain packages to be installed via a PPA. However, I believe this is a bit uncomfortable when there's many PPAs, and it might not always be easy to come up with rules for the pinning process.
What I'm after is a simple way to display a list of all packages which would be installed by a apt-get upgrade
call, and which repository they come from; most comfortably in some table form.
Any ideas?
apt-cache madison <package-name>
shows the repository/ies from which the package originates.