A Protocol for Package Management
Summary
The post outlines a high-level reference model for package management, identifying layers, actors, data types, and operations that all package managers share. It argues for a portable vocabulary to compare registries and tools, enabling better research into security, governance, and cross-ecosystem tooling.