The C-Shaped Hole in Package Management
Summary
The article explains the mismatch between system and language package managers, highlighting the 'C-shaped hole' where C dependencies aren’t represented across ecosystems. It discusses phantom dependencies, bridging efforts (Conda, Spack, Nix/Guix), and a proposal to map cross-ecosystem symbols to improve security, vulnerability tracing, and sustainability.