一句话:提出 Package Calculus,统一包管理器依赖解析的核心语义,为跨生态依赖表达提供形式化基础。
包管理器种类繁多,各编程语言与操作系统都有各自方案,其依赖解析语义存在细微差异。这种碎片化使多语言项目难以精确表达跨语言生态的依赖,系统外部依赖常被隐式且无版本地处理,也遮蔽了供应链分析所需的完整依赖图。为此,作者提出 Package Calculus——一种统一包管理器依赖解析核心语义的形式化模型。论文通过一系列形式化归约,展示该核心足以建模现实世界中多样化的依赖表达语言。该演算为未来跨生态工具提供理论基础,可作为依赖表达的通用语言(lingua franca)。
Package managers are legion. Every programming language and operating system has its own solution, each with subtly different semantics for dependency resolution. This fragmentation prevents multilingual projects from expressing precise dependencies across language ecosystems; it leaves external system dependencies implicit and unversioned; and it obscures the full dependency graph that supply-chain analysis depends on. We present the Package Calculus, a formalism for dependency resolution that unifies the core semantics of package managers. Through a series of formal reductions, we show how this core is expressive enough to model the diversity of real-world dependency expression languages. The calculus provides the theoretical foundation for future cross-ecosystem tooling, as a lingua franca of dependency expression.
DOI 原文 · arXiv · PDF(开放获取) · DBLP
@article{abs-2602-18602,
title = {Package Managers à la Carte: A Formal Model of Dependency Resolution},
author = {Ryan T. Gibb and Patrick Ferris and David Allsopp and Thomas Gazagnaire and Anil Madhavapeddy},
journal = {Proceedings of the ACM on Programming Languages},
volume = {10},
number = {ICFP},
year = {2026},
doi = {10.1145/3828699}
}