In order to deploy a package, take a look at this guide.
All packages are stored on
SPM Registry, which is a distributed database running on top of
In order to have a clean way of managing
SPM Registry defines a certain set of rules that must be followed.
- Reserving a package name works by the principle:
first one to take.
- Each reserved package contains a
public key, that is valid for maximum
3 monthsafter the last package update.
- Owning a package, means owning a corresponding
private keythat is used for signing package versions.
- Each package version contains a
ECDSAsignature of the following:
- Owner can
extend ownershipafter two months. If he fails to extend it after
3 months- he loses ownership of the package, than the 1. rule applies.
- Package versions
can not be changed or modified, you can only publish new ones. This is to ensure the integrity of the package version, and that it has not been tampered with.