https://nesbitt.io/package-manager-threat-model/
Package Manager Threat Model | Andrew Nesbitt
A maintained checklist for auditing package managers: recurring weakness patterns from the public advisory record, and the design questions that sit outside it.
package managerthreat modelandrew nesbitt
https://nesbitt.io/2026/06/27/this-week-in-package-management.html
This Week in Package Management: 27 June 2026 | Andrew Nesbitt
Jun 27, 2026 - Releases, advisories, and articles from across the package management world
this weekpackage managementandrew nesbittjune