Which package-management libraries twenty package managers reuse from each other.
could code live with the data, without residing with the data?
Using Homebrew's tap machinery as a curated distribution layer for GitHub Actions.
Use Atmosphere accounts for Minecraft.
Git Should Let Files Ignore Themselves
Most package managers could separate download from install for better Docker layer caching.
Maintainer attention as a finite resource.
Zig's long road to supply chain security.
Where package management fits in the digital sovereignty discussion.
Follow serde@crates.io from your Mastodon account
Why fixing package managers is harder than it looks.
A shared vocabulary for resolution, publishing, and governance across ecosystems.
Applying Jepsen-style adversarial testing to package managers.
Extending import maps with package metadata to improve dependency management and security for browser-native JavaScript.
Go's module system accidentally created a universal, content-addressed, transparency-logged package CDN. You could abuse this for any language.
Lockfiles and SBOMs record the same information in different formats. What if package managers used SBOMs directly, instead of converting later?
I've been loving all the new apps that have started to emerge in the at-protocol ecosystem, now there isn't just BlueSky but also