@gothnbass@linuxrocks.online
> ASDF version dependencies are supported in that schema now, so we're on the same page there.

As far as I know, ASDF doesn't support that yet. I may be wrong, but I haven''t seen it in the documentation nor in the wild.

> Namespacing: exactly what do you have in mind here?

Most Common Lisp packages have very generic names. Namespacing would help in avoiding collitions. Again that should be done in ASDF.

> Mark as buggy: already covered by "doesn't build/pass its tests on that platform."

Not exactly my idea. (I should have clarified.) I'm talking about versions of packages superseded by (serious) bugfix releases. The point is to avoid downloads with known security vulnerabilities and the like.

Is a build test really needed in a system like this? I would let developers deal with that, but I''m not opposed to different approaches. Again, maybe I'm not understanding this through.

> Separate components: that's central to the way I'm thinking about this

I completely agree. I would even remove any coupling to a specific website.

@louis@emacs.ch