October 2026
This Week in Package Management: 31 October 2026
Releases, advisories, and articles from across the package management world
Signing and Attestations Across Package Registries
A survey of signing, provenance attestations and trusted publishing across package registries.
This Week in Source Control: 28 October 2026
Releases, advisories, and articles from across version control and forges
Package Management Devroom at FOSDEM 2027: Call for Participation
Submissions close 1 December.
This Week in Package Management: 24 October 2026
Releases, advisories, and articles from across the package management world
One Small Bug
Want me to fix that too?
Trust Stores Are Dependencies Too
26 of 29 CA bundles in critical packages contain roots Mozilla has removed.
This Week in Package Management: 17 October 2026
Releases, advisories, and articles from across the package management world
Now That's What I Call Technical Debt!
15 chart-topping hits about unpaid maintainers and overconfident AI agents.
This Week in Package Management: 10 October 2026
Releases, advisories, and articles from across the package management world
Package Management RFCs
Which package management specs exist and where do they live?
This Week in Package Management: 3 October 2026
Releases, advisories, and articles from across the package management world
Software Heritage Identifiers
Notes from CodeCommons: SWHIDs, the SWH archive, and connecting both to package metadata.