I've been a big fan of FakeClockUp for a while (search the forums for my posts on it). I usually suggest people get it from the original repo:
http://hitoriblog.com/apt/ instead of the various pirate repos that sometimes have it.
Generally, a legit repo link is fine. If its a repo that specializes in stealing apps, it shouldn't be posted.