Peer.pm
A package manager for installing software, shared between peers and addressed by content, so no central provider controls it.
- Status
- Coming soon
01What it is
Peer.pm is a distributed package manager: the supply chain that lets a declarative system like SpacesOS exist without a coordinating foundation behind it. Packages are identified by the hash of their own inputs rather than by whoever hosted them, so anyone can verify what they receive, whatever the source.
Trust in a package comes from attestation, not authority. Independent builders make signed, bonded claims that a given specification produces a given output. Anyone can challenge a claim through a verification game that narrows the dispute down to a single step that can be checked on-chain.
- Addressed by contentA package is identified by the hash of its inputs, not by who hosts it.
- Shared between peersMachines trade packages directly, with no central server to capture.
- Private by defaultCover traffic, oblivious transfer and onion routing hide what you fetch and who is asking.
- Attested buildsIndependent builders sign bonded claims that a specification produces a given output.
- Open to challengeAnyone can dispute a claim in a verification game settled by one on-chain step.
- Trust that adds upConfidence grows from many independent attestations, not one publisher’s word.
02Essays and updates
Nothing written about Peer.pm yet.