Paco is a free tiny package manager that provides a safer way to manage dependencies by downloading and installing packages from a trusted and predefined array rather than shipping addons and / or binaries directly with the project.
It’s pretty much like Python, Go, or Ruby, where project dependencies can be installed from a list of packages and versions.
We’d love to get any feedback on this and know what you’d like to see improved
Thanks! 👋
Where? I read a suggestion that one could hack the official registry and that’s exactly one of the point that @copygirl@lemmy.blahaj.zone raised afterwards
Then OP just says lock files and checksums are planned, can’t you read?