1
开源包管理器 Homebrew 7.0.0 发布，推出原生苹果 macOS App
IT之家 9 月 13 日消息，当地时间 9 月 13 日，适用于 macOS 和 Linux 的开源包管理器 Homebrew 发布了 7.0.0 大版本更新。 Homebrew 是一个免费且开源的工具，能通过终端（Terminal）输入简单的指令，来快速安装、卸载、更新和管理电脑上的各种软件及开…
2
OpenAI 承认其 AI 智能体曾对 Ruby 语言包管理器 RubyGems 发起网络攻击
IT之家 9 月 12 日消息，据 《华尔街日报》当地时间周五报道，OpenAI 智能体开发人员参与了一起此前未披露的网络攻击， 该攻击使 RubyGems 服务不堪重负 。 IT之家注：RubyGems 是 Ruby 语言的包管理器，用于创建、分享和安装 Ruby 程序库（称为 gem），类似 P…
3
Show HN: Pharos – A package manager for MCP servers (like NPM, but for MCP)
MCP服务器也有包管理器了！Pharos像npm一样管理MCP服务，支持后台守护、自动卸载，装服务就跟装npm包一样爽。
Hey HN! Dev here. I built PHAROS, an open-source CLI package manager for MCP servers. Think npm, but for MCP. What it does: - Search across all MCP re…
4
OpenAI buying Astral means uv now answers to a model company
OpenAI收购Astral，Python包管理神器uv从此归属模型公司，速度提升百倍引瞩目。
Python packaging was finally solved, and the solution turned out to be a tool so powerful, user environment sanity isn't the only use case. It install…
5
Supply-chain hygiene for Emacs: LLM review of package upgrades
用LLM自动审查Emacs包升级，给供应链安全上了道新保险，实用又硬核。
Article URL: https://blog.fidelramos.net/software/emacs-straight-ai-review Comments URL: https://news.ycombinator.com/item?id=49220254 Points: 1 # Com…
6
Show HN: Secchi – Package intelligence in your terminal
用命令行深度洞察软件包健康度、依赖与生态信号，开源神器 Secchi 让包管理一目了然。
Article URL: https://github.com/kannandreams/secchi Comments URL: https://news.ycombinator.com/item?id=49216086 Points: 1 # Comments: 1
7
Show HN: Weightlift – the missing package manager for downloading model weights
模型权重下载管理利器，让Web AI应用轻松搞定模型下载、缓存与进度展示，告别重复造轮子。
If you’re building an on-device web-based AI app, you’ve probably built this 50 times already: Something that tells your users which models are availa…
8
Show HN: MKPM – GNU Make Package Manager
GNU Make也有包管理器了，极简单实现Makefile跨项目共享与复用，支持OCI远程注册表。
Article URL: https://github.com/fe18m/mkpm Comments URL: https://news.ycombinator.com/item?id=49090245 Points: 1 # Comments: 1
9
Installing Composer Packages in WordPress Without SSH
无需SSH也能在WordPress中用Composer装包，托管主机用户必备技巧
Cross-posted from the Loopress docs Loopress is a toolset to make WordPress reproducible and reviewable via Git . Versioned snippets, Composer without…
10
UniGetUI：可能是 Windows 下最好用的应用商店
集成WinGet、Chocolatey等包管理器，UniGetUI让Windows软件管理像应用商店一样简单。
UniGetUI 是一个不错的包管理器，它提供的统一的更新 UI，让你的软件最大程度集中在一起管理，还可以用于需要批量配置的场景。 查看全文
11
国产像素风 Roguelike 游戏《背包地牢》登陆 Steam，首发价 14.4 元
国产像素风背包管理Roguelike《背包地牢》Steam首发仅14.4元，支持中文，另有捆绑包优惠。
IT之家 7 月 16 日消息，国产独立开发商夜喵开发、Shuffle Play Games 发行的像素风背包管理 Roguelike 游戏《背包地牢》现已正式登陆 Steam 平台，首发特惠价仅 ¥14.40，支持简体中文界面与字幕。IT之家附游戏商品页（ https://store.steamp…
12
Claude Code Skills for safe PHP and JS package updates
用Claude Code技能安全更新PHP和JS包，避免历史重演。
It's not abnormal for projects to go weeks, or dare I say months, between dependency updates. And when people finally do update, they do it in full fo…
13
Linux Package Management Explained Simply (apt, dnf, yum & rpm)
新手快速掌握Linux四大包管理器apt、dnf、yum和rpm的增删查改操作
Quick Note In my previous article, I mentioned that Linux Troubleshooting Flow for Beginners would be the final post in this series. While preparing i…
14
Show HN: CLI that helps AI agents avoid vulnerable dependencies
AI代理的依赖漏洞检查器，本地CLI+MCP运行，覆盖npm/PyPI等15+包管理器的开源安全工具。
deptrust is a CLI that checks package versions for known vulnerabilities across npm, PyPI, crates.io, Go modules, RubyGems, NuGet, Maven, Packagist, p…
15
pnpm just saved my day
弱网环境下的救命神器：pnpm首次体验就解决了React大型依赖安装难题
Phew😅, I've finally found a way to create a react app or installing large packages on nodejs while having a bad network connection. Today I became ver…
16
Will npm v12 reject your .npmrc?
npm v12 将严格校验 .npmrc 未知配置，高影响力账户还将面临72小时只读锁，提前了解避免踩坑。
#792 — June 30, 2026 Read on the Web JavaScript Weekly Deno 2.9: deno desktop , npm/Bun Migration, and Half the Cold-Start Time — A huge release: den…
17
Why uv Became the Go-To Python Package Manager in 2026
pip 90秒 vs uv 8秒，Python包管理器新宠uv究竟有多快？实测数据揭示性能碾压
Installing 23 packages from a warm cache takes pip about 6.6 seconds, while uv handles the same task in just 0.12 seconds. On larger projects involvin…
18
软件包聚合平台 Swift Package Index 官宣加入苹果，承诺保持开源
Swift Package Index 加入苹果仍承诺保持开源，Swift 生态开发者可以放心关注。
IT之家 6 月 24 日消息，软件包聚合平台 / 元数据索引平台 Swift Package Index 昨天宣布加入苹果大家庭，官方承诺保持开源。 IT之家注：Swift Package Index 是一个开源的 Swift 软件包搜索引擎和元数据索引平台，拥有搜索 Swift 软件包、自动生成…
19
Ask HN: Is anyone else leaving AUR?
Arch用户因信任风险从AUR转向官方仓库，引发包管理安全性的社区讨论
I'm spending a lot of my time removing AUR packages for alternatives in the official Archlinux repositories. I've shifted from Dropbox to RClone, from…
20
Show HN: Build and distribute native Linux packages easily
一键构建并自托管Linux包，支持apt、dnf、pacman等主流仓库，可运行在GitHub Actions或本地。
Linux has issues when it comes to distributing software. Centralized repositories existed long before the App Store, but they aren't meant for indie d…