Interesting academic papers related to package management

[andrew]

I started a making a list of published papers that appeared relevant to package manager research and software dependencies, figured it'd be useful to share it. Feel free to add more in the comments.

• A Look In the Mirror: Attacks on Package Managers
• Automatic Software Dependency Management using Blockchain
• Reflections on Trusting Trust
• SPAM: a Secure Package Manager
• Toward Decentralized Package Management
• Why do software packages conflict?
• Dependency solving
• A modular package manager architecture
• A method to generate traverse paths for eliciting missing requirements
• MPM: a modular package manager
• A look in the mirror: attacks on package managers
• Towards efficient optimization in package management systems
• On software component co-installability
• Package upgrades in FOSS distributions: details and challenges
• On the use of package managers by the C++ open-source community
• An adaptive package management system for scheme
• NixOS: a purely functional Linux distribution
• On the topology of package dependency networks: a comparison of three programming language ecosystems
• When It Breaks, It Breaks: How Ecosystem Developers Reason about the Stability of Dependencies
• On the Development and Distribution of R Packages: An Empirical Analysis of the R Ecosystem
• Software engineering with reusable components
• A look at the dynamics of the JavaScript package ecosystem
• A historical analysis of Debian package incompatibilities
• Mining component repositories for installability issues
• The Evolution of Project Inter-dependencies in a Software Ecosystem: The Case of Apache
• OPIUM: Optimal Package Install/Uninstall Manager
• How the Apache community upgrades dependencies: an evolutionary study
• The Spack Package Manager: Bringing Order to HPC Software Chaos
• PubGrub: Next-Generation Version Solving

[jessicaschilling]

@andrew could this live in an .md file in the docs directory too? As kind of a permanent reference reading list?

[andrew]

@jessicaschilling yeah, I've shared this issue in a few chat rooms and on twitter to see if there are any other significant ones I've missed, should definitely roll it into #53 though 👍

[jdorfman]

How Awesome™ Lists are born

[boegel]

A few more on EasyBuild:

• EasyBuild: Building Software With Ease
• Modern Scientific Software Management Using EasyBuild and Lmod
• Making Scientific Software Installation Reproducible On Cray Systems Using EasyBuild

[andrew]

Going to be moving the content of this issue into the /docs in the repository in #53

[mschwager]

Also: Small World with High Risks: A Study of Security Threats in the npm Ecosystem