Anyway to verify the module updates are bonafide? - not addressed

Is there any place where the latest module updates are listed?
I ask because I’ve been receiving an inordinate amount of “updates” for the System Admin module - last was version
I’m not normally paranoid, but it’s a fair question for a communications environment.

When updates are offered, there’s a changelog available on the Module Admin - does NOT say enough / does not link to anywhere where there’s more information. That’s just bad form

As for the security of such updates, the assumption is that because the system picks up such things from a specific site there will not likely be any trojans passing.

Yes we are adding some major changes to it so rolling version quite a bit.