Haha, Debian take package security seriously? http://digitaloffense.net/tools/debian-openssl/ http://digitaloffense.net/tools/debian-openssl/ But for real, it'

Haha, Debian take package security seriously? http://digitaloffense.net/tools/debian-openssl/ http://digitaloffense.net/tools/debian-openssl/ But for real, it's not that hard to integrate your language library distribution thingy into something like Debian. Using what the OP was talking about as an example, CL has had the Common Lisp Controller (http://www.cliki.net/common-lisp-controller http://www.cliki.net/common-lisp-controller) in Debian for a long time now (6 years? more?). This still doesn't help answer "which libraries should I use? which ones should I avoid?" For something like that, the problem with the CL community is that people are generally reluctant to criticize each other's work.