The best Software Packaging newsletters

Brett Cannon's blog covers Python packaging, security and governance, from proposals for reproducible builds on PyPI to his Python Packaging Council nomination. Readers get firsthand, detailed reasoning from a longtime core developer on supply-chain security and practical steps like hardening GitHub Actions publishing workflows.

A blog from the Fyra Labs team covering their RPM repository tooling (Subatomic, kiritan), policy on LLM use in their community, and release news for the Ultramarine Linux distribution. Readers get technical write-ups on package metadata performance and project governance updates from a small open source team.