I agree. Furthermore, it feels like creating and maintaining a Debian package becomes redundant with various git/docker/pip/maven repositories and tools. Half

I agree. Furthermore, it feels like creating and maintaining a Debian package becomes redundant with various git/docker/pip/maven repositories and tools. Half of the package management problems are social issues such as security, audit, openness to newcomers, collaboration, and trust. We could probably solves those problems for all package managers (pip, various image registries, npm, etc) at once. We would maybe need a new package manager protocol that everyone agrees on rather than new filesystem tricks. Something like a federated package manager (sounds a bit buzzword).