I think it would be great to have a website like https://flathub.org/ where we have individual pages for user submitted depot applications that you can then add extra metadata information to such as the Screenshots, description, source code links, programming languages used, licenses, statistics such as user downloads, user reviews, issues or comments, update/commit histories and notes, whether the user that owns/submits the application to the depot has been verified, i.e signed the Genode Contributors Agreement so that their submissions are tied to their identity, therefore you can choose to download it if you trust that user. Similar to the Flathub Flatpak permissions lists, it can also list what permissions it absolutely requires, i.e network access, and which are optional, i.e that you can use blackhole for.
If you browse https://flathub.org/ you can see what I am suggesting. A similar website that allows Genode and Sculpt OS users to explore other user's depot's and application submissions. Currently, it is not very intuitive or easy to explore depots, or find extra information about them before deciding to install and use it or not. Having a user repository website would allow you to make more informed decisions and have more trust in what applications you are downloading. The user submitted applications can also be linked to the source code so that users that do not necessarily have trust, can gain it by auditing the source of the depot applications.