Reading up on package-managers
4 deep · digging since jan 03
- Package managers that package package managers
Andrew Nesbitt built a matrix showing which of 42 package managers can install each other, finding a 14-hop chain from AUR to an Elm compiler.
- GitHub - microsoft/apm: Agent Package Manager
Microsoft's APM is an open-source dependency manager for AI agents that lets teams declare agent configurations in a manifest file and reproduce them across tools like Copilot, Claude, and Cursor.
- Package Managers Need to Cool Down
A survey finds that while many package managers and update tools have adopted dependency cooldowns to prevent supply chain attacks, implementations vary wildly in naming, scope, and timestamp handling, and major ecosystems like Go, Maven, and Gradle still lack support.
- Can Bundler be as fast as uv?
Aaron Patterson argues Bundler can match uv's speed through design changes like parallel installation and a global cache, not just a Rust rewrite.