arXivDaily arXiv每日学术速递 周一至周五更新
北美退伍军人节(Veterans Day),12 日无更新
arXiv 2602.18602cs.PLcs.SE
收藏

按需定制的包管理器:依赖解析的正式模型

Package Managers à la Carte: A Formal Model of Dependency Resolution

University of Cambridge(剑桥大学);Jane Street(简街);Tarides

Ryan Gibb, Patrick Ferris, David Allsopp, Thomas Gazagnaire, Anil Madhavapeddy

AI总结:

本文提出Package Calculus,通过形式化缩减展示其能统一包管理器的核心语义,为跨生态系统工具提供理论基础。

摘要:

包管理器种类繁多。每种编程语言和操作系统都有自己的解决方案,每种都有细微不同的依赖解析语义。这种碎片化阻碍了多语言项目在不同语言生态中精确表达依赖;使外部系统依赖隐含且未版本化;并掩盖了供应链分析依赖的完整依赖图。我们提出了Package Calculus,一种依赖解析的形式化模型,统一了包管理器的核心语义。通过一系列形式化缩减,我们展示该核心足以建模现实世界中依赖表达语言的多样性。该算式为未来跨生态系统工具提供了理论基础,作为依赖表达的通用语言。

英文摘要:

Package managers are legion. Every programming language and operating system has its own solution, each with subtly different semantics for dependency resolution. This fragmentation prevents multilingual projects from expressing precise dependencies across language ecosystems; it leaves external system dependencies implicit and unversioned; and it obscures the full dependency graph that supply-chain analysis depends on. We present the Package Calculus, a formalism for dependency resolution that unifies the core semantics of package managers. Through a series of formal reductions, we show how this core is expressive enough to model the diversity of real-world dependency expression languages. The calculus provides the theoretical foundation for future cross-ecosystem tooling, as a lingua franca of dependency expression.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑