September 2026
This Week in Package Management: 5 September 2026
Releases, advisories, and articles from across the package management world
How much should you trust your OSS data?
Every second, open source shapes our software, yet our view of this ecosystem is surprisingly opaque. How much can you really trust OSS data?
Git Submodules as a Package Manager
.gitmodules is a manifest and the gitlink is a lockfile entry.