I think your replacement-upstream repo notion is sensible. (I should also say that my comments were more directed at packages that actually have functional upstreams.)
Attachment: pgpZhu0V3QbTG.pgp Description: PGP signature