#packagemanagers — Public Fediverse posts

" #Dependencycooldowns are a free, easy, and incredibly effective way to mitigate the large majority of open source #supplychain attacks. More individual projects should apply cooldowns (via tools like Dependabot and Renovate) to their dependencies, and packaging ecosystems should invest in first-class support for cooldowns directly in their #packagemanagers "

https://blog.yossarian.net/2025/11/21/We-should-all-be-using-dependency-cooldowns

www.both.org?p=14070

#Linux #PackageManagers #apt #dnf #Both.org

#Development #Fun
Package manager easter eggs · The whimsical side of dependency management https://ilo.im/16bwlb

_____
#EasterEggs #PackageManagers #Linux #Python #Ruby #Npm #JavaScript #WebDev #Frontend #Backend

#Development #Overviews
Package managers need to cool down · The state of dependency update delay mechanisms https://ilo.im/16bnm5

_____
#Attacks #SupplyChain #PackageManagers #Dependencies #Npm #Vulnerability #Security #WebDev #Frontend #Backend

🎁📦 Oh, look! Another riveting exposé on the perils of package managers overheating in the wild, wild west of software ecosystems. Let's pause to applaud the profound proposal of a global cooldown period—because who doesn't want their software updates to feel like waiting for their coffee to cool? ☕🔄
https://nesbitt.io/2026/03/04/package-managers-need-to-cool-down.html #packageManagers #softwareEcosystems #cooldownPeriod #techExposé #softwareUpdates #HackerNews #ngated

Package managers need to cool down

https://nesbitt.io/2026/03/04/package-managers-need-to-cool-down.html

#HackerNews #PackageManagers #CoolDown #SoftwareDevelopment #TechTrends #HackerNews

🫰 Open source package repositories face sustainability crisis

｢ So Maven and other open source repositories are considering introducing a tiered payment system. Lone developers and small groups will still be able to download the code for free, but the hogs will have to pay for every download. In other words, open source software is still free as in speech, but you can forget about being "free as in beer" going forward. ｣

https://www.theregister.com/2026/02/28/open_source_opinion/

#opensource #packagemanagers #sustainability

Package managers keep using Git as a database, it never works out

https://nesbitt.io/2025/12/24/package-managers-keep-using-git-as-a-database.html

#HackerNews #PackageManagers #GitDatabase #SoftwareDevelopment #DevOps #TechTrends

🎉 In the riveting drama of package managers, #UV stunningly dethrones #Pip in the CI arena for #Wagtail users! 🏆 Meanwhile, the rest of the internet wonders if Wagtail is developing plans to conquer other obscure niches that nobody uses. 🙄🌱
https://wagtail.org/blog/uv-overtakes-pip-in-ci/ #PackageManagers #CIDrama #HackerNews #ngated

“Package Managers Are Evil”, Bill “GingerBill” Hall (https://www.gingerbill.org/article/2025/09/08/package-managers-are-evil/).

On HN: https://news.ycombinator.com/item?id=45167394

On Lobsters: https://lobste.rs/s/zvdtdn/package_managers_are_evil

#Programming #Packages #Dependencies #DependencyHell #PackageManagers #Rants #DependencyManagement

You have to be shitting me. God I fucking hate npm.

I literally spent an hour trying to diagnose why the builder was "freezeing" for several minutes, and it's because it downloads thousands of packages for a project with... 20 dependencies.

Fuck NPM. Fuck JavaScript.

#Programming #JavaScript #Node #NodeJS #JS #ECMAScript #NPM #PackageManagers #SoftwareDevelopment #WebDevelopment #WebDev

Oh joy, another ✨ revolutionary ✨ tool to make generating OS images more complicated than assembling IKEA furniture without instructions. It's like #systemd decided to throw a party and invited all the package managers just to remind us that #Linux enthusiasts can never have too many ways to reinvent the wheel. 🚴‍♂️💨
https://mkosi.systemd.io/ #OSimages #packagemanagers #techhumor #HackerNews #ngated

Also:

Dear Devs,

If you're making a package/module manager and it has a "sorry, we can't satisfy all dependencies" error then maybe think about adding a "please explain why" option and not just a "force" option?

Regards,

SysAdmins and Devs

#Puppet #SysAdmin #PackageManagers

"The Great npm Garbage Patch"

https://blog.phylum.io/the-great-npm-garbage-patch/

#npm #supplychain #security #packagemanagers

Ah, removing tensorflow 'solves' the issue.

Another another reason why `transformers` -- and Python packaging as a whole -- sucks.

venv (virtual environments) are not a solution either: in multi-user environments with limited disk space, you can't afford like 4 copies of 1.5GB Tensorflow/PyTorch/etc installed.

Why python packages like these are this massive in the first place is beyond me.

Something has to change here.

/rant

#Python #sucks #PackageManagers

The #CloudNative landscape is thriving, but a crucial aspect remains missing: a robust package management system.

But the wait is over! #Glasskube has arrived! #opensource

Explore its inaugural release (v0.0.1): https://bit.ly/43gn1UB

#InfoQ #Kubernetes #Containers #PackageManagers #DevOps

I cpuld use some help about #PackageManagers for #windows

I could use #KeePassXC and other stuff

Should I install #Chocolatey ?

I could use some help with that too

Package managers as verbs.

“Just #winget it.” Works well.
“Just #scoop it.” Great.
“Just chocoloco… chocalaca… choco lately?” I can’t even pronounce it.
“Just apt-get it.” The apt part is a little harsh, but overall not bad.
“Just #pacman it.” Meh.
“Just #flatpak it.” Pretty good.
“Just #homebrew it.” Maybe confusing, but sounds nice.
“Just #adb it.” Nuh.

#Linux #Windows #MacOS #Android #CLI #PackageManagers #aptget #chocolatey

But as with anything, it's never easy and more of a people problem. The technology is there and widely employed by package managers such as dpkg, pacman, apk, etc...
It just never was an issue, as you'd spend more time compiling anyway.

#Gentoo #linux #packagemanagers #portage

Gentoo goes binary!

https://www.gentoo.org/news/2023/12/29/Gentoo-binary.html

#linux #gentoo #opensource #foss #packagemanagers

Here is my reply to @BrodieOnLinux regarding his "Stallman's Bizarre Take On Flatpaks & Snaps" video.

https://keingerede.eu/reply-to-brodies-stallman-flatpak-video.html

#FreeSoftware #FOSS #FLOSS #OpenSource #Package #PackageManagers #Stallman #Flatpak #Snap #Docker