A system and a method are disclosed for tracking package repositories using blockchain. The method includes publishing a transaction on a blockchain when a package maintainer wants to put out a new release of software packages or libraries. The blockchain provides a mechanism for agreement between package maintainers to provide a snapshot of all the versions of the software packages in time. The disclosed system is configured for tracking package repositories thereby giving the users build reproducibility and agreement on canonical versions of libraries. Further, a token mechanism may be provided to reward the package maintainers for using the blockchain. The package maintainers may use these tokens to pay for transactions or make announcement related to version release on the blockchain.
KEYWORDS: Software packaging, versioning, blockchain, version compatibility
Creative Commons License
This work is licensed under a Creative Commons Attribution 4.0 License.
Pang, Alfred, "Tracking Package Repository Release Using Blockchain", Technical Disclosure Commons, (May 29, 2018)