As usage of dh-cruft becomes more common, dh-cruft could also be a big liability if it were to be defective. Until now, every few years, testing happened there: https://github.com/a-detiste/dh-cruft-test In the future, a autopkgtest should build some fake .deb using dh-cruft and verify the results.