As a user I'm a bit wary of installing packages directly from GitHub. The CRAN review process isn't perfect, but it's much less likely that some malicious code accidentally slipped in, or that someone is namesquatting on a popular package name but is not the genuine package. With a random GitHub link I'd feel like I need to do this reviewing work every time myself: investigate who owns the GitHub repository, what their track record is, what recent commits there are and by whom and how reviewed, etc. That's a lot more work than using the heuristic that "CRAN code is probably safe". More mundanely, CRAN typically does a good job with dependencies, and is usually in a working state.
I could see alternate curated repositories from CRAN, but to switch from CRAN I'd still want some kind of curation.
Comments
As a user I'm a bit wary of installing packages directly from GitHub. The CRAN review process isn't perfect, but it's much less likely that some malicious code accidentally slipped in, or that someone is namesquatting on a popular package name but is not the genuine package. With a random GitHub link I'd feel like I need to do this reviewing work every time myself: investigate who owns the GitHub repository, what their track record is, what recent commits there are and by whom and how reviewed, etc. That's a lot more work than using the heuristic that "CRAN code is probably safe". More mundanely, CRAN typically does a good job with dependencies, and is usually in a working state.
I could see alternate curated repositories from CRAN, but to switch from CRAN I'd still want some kind of curation.