Standard Search

https://nesbitt.io/2026/06/11/what-happened-to-tea.html · 11 Jun 2026

Reading the tea leaves

package-managers supply-chain deep-dive

https://nesbitt.io/2026/04/13/common-package-specification.html · 13 Apr 2026

Not the cross-ecosystem format the name suggests.

package-managers metadata sbom deep-dive

https://nesbitt.io/2026/03/29/the-roles-of-packages.html · 29 Mar 2026

Applying Sajaniemi's roles of variables to packages across every kind of package manager.

package-managers taxonomy deep-dive

https://nesbitt.io/2026/03/14/whats-going-on-with-fair-package-manager.html · 14 Mar 2026

Federated FAIR pivots from WordPress to TYPO3

package-managers deep-dive

https://nesbitt.io/2026/03/08/if-it-quacks-like-a-package-manager.html · 8 Mar 2026

Some tools waddle like package managers without learning to swim.

package-managers security deep-dive

https://nesbitt.io/2026/03/04/package-managers-need-to-cool-down.html · 4 Mar 2026

A survey of dependency cooldown support across package managers and update tools.

package-managers security ecosyste.ms deep-dive

https://nesbitt.io/2026/03/03/package-management-is-naming-all-the-way-down.html · 3 Mar 2026

There are two hard problems in computer science, and package managers found at least eight of them.

package-managers deep-dive

https://nesbitt.io/2026/02/23/where-do-specifications-fit-in-the-dependency-tree.html · 23 Feb 2026

RFC 9110 is a phantom dependency with thousands of transitive dependents.

package-managers dependencies deep-dive

https://nesbitt.io/2026/02/18/what-package-registries-could-borrow-from-oci.html · 18 Feb 2026

OCI's storage primitives applied to package management.

package-managers oci deep-dive

https://nesbitt.io/2026/02/17/platform-strings.html · 17 Feb 2026

An M1 Mac is aarch64-apple-darwin, arm64-darwin, darwin/arm64, or macosx_11_0_arm64 depending on which tool you ask.

package-managers deep-dive