Tag: reference
Content addressing in package managers
Names are for humans, hashes are for everything else
Sunsetting a Package Manager
A frozen registry is the one place a package can never be patched again.
How Open Source Projects Change Hands
There are fewer ways to leave your package than to kill it.
nasin toki
This is my nasin for writing toki pona. My nasin includes things meant for better typesetting, improved readability of text, and preserving the generally artistic nature of toki pona whether that is in sitelen pona or sitelen Lasina. Most of the readability that I talk about boils down to: When dealing with multiple subjects, several head-nouns or verbs, your text might get cluttered and you might visually end up with a huge wall of text. This can be, and probably will be, readable, but it doesn...
Forms of Open Source Government
Open source has more forms of government than countries do.
Package Manager Patents
A reference list of patents and applications relevant to package manager design, with notes on prior art.
Install-script allowlists
A survey of install-script allowlist mechanisms across package managers and language ecosystems.
Skills Registry Threat Models
How long until we see a CVE filed against a markdown file?
Package Security Problems for AI Agents
Packages all the way down, agents all the way up.
Package Manager Easter Eggs
A tour of the easter eggs hiding inside package managers.
Git Diff Drivers
What git's diff drivers can do, from built-in language support to custom textconv filters.
Package Manager Mirroring
Every mirroring tool I could find, and the protocols underneath them.
Package Manager Magic Files
Package manager magic files and where to find them: .npmrc, MANIFEST.in, Directory.Packages.props, .pnpmfile.cjs, and more.
Forge-Specific Repository Folders
Magic folders in git forges: what .github/, .gitlab/, .gitea/, .forgejo/ and .bitbucket/ do.
Package Manager Podcast Episodes
A reference list of podcast episodes about package managers, grouped by ecosystem.
Dependency Resolution Methods
A reference on how package managers solve the version constraint satisfaction problem, from SAT solvers to content-addressed stores.
Git's Magic Files
Magic files and where to find them: .gitignore, .gitattributes, .mailmap, .git-blame-ignore-revs, .lfsconfig, and more.
2026 New Year's Resolution
This is my New Year's Resolution - The 3 Doohickey System
Package Manager People
People who built, maintain, or research package managers.
Package Manager Glossary
A cross-ecosystem glossary of package management terms.
Package Management Blog Posts
Blog posts, talks, and essays that changed how people think about dependency management.
The Package Management Landscape
A directory of tools, systems, and services that relate to package management.
Categorizing Package Registries
Sorting package registries by architecture, review model, namespacing, governance, and other structural differences.
Categorizing Package Manager Clients
Sorting package manager clients by resolution algorithms, lockfile strategies, build hooks, and manifest formats.
Frieren: Beyond Journey's End
This is a critique of the Frieren: Beyond Journey's End series's season 1
The Phoenician Scheme Critique
This is a critique of The Phoenician Scheme (2025) by Wes Anderson.
What is a Package Manager?
What is a package manager? Perhaps quite a few more components than you might think
Documenting Package Manager Data
Six repositories documenting how package managers work: commands, manifests, APIs, hooks, and more.
Extending Git Functionality
A practical guide to the different ways you can extend git: subcommands, filters, hooks, remote helpers, and more.
Package Manager Timeline
A chronological timeline of package manager releases, major milestones, and significant events in the history of software dependency management.
Package Management Papers
A collection of academic research papers on package management systems, dependency resolution, supply chain security, and software ecosystems.
Running IO with Docker
The best way to run IO is with its Docker container. Here's how.
IO Configuration Reference
Here's how you can configure IO using its HCL-based configuration language.
From ZeroVer to SemVer: A List of Versioning Schemes in Open Source
A curated catalogue of versioning schemes used in open source software—from the conventional to the creative.