July 2026
This Week in Package Management: 18 July 2026
Releases, advisories, and articles from across the package management world
Plumbing Homebrew into the vulnerability ecosystem
One command, six repos, three standards bodies, an advisory database, and a version comparator written in the wrong language.
This Week in Package Management: 11 July 2026
Releases, advisories, and articles from across the package management world
Package Management as Org Chart
Conway's Law applied to dependency management designs.
Unboxed: Zig
Zig's package manager: mechanics, categorisation, governance, threat model.
Content addressing in package managers
Names are for humans, hashes are for everything else
This Week in Package Management: 4 July 2026
Releases, advisories, and articles from across the package management world
The CRA is not about open source
The CRA created an open-source steward role, then left maintenance unfunded.