> In apt, not anyone can just register any package name. Yes they can. Yes distributions maintain archives and are able to decide what to include. But there's

> In apt, not anyone can just register any package name. Yes they can. Yes distributions maintain archives and are able to decide what to include. But there's nothing special about apt per se that prevents namesquatting. If you create a well-used PPA, for example, you could easily add extra packages, e.g. "firefix", later on. The next time someone runs `apt update`, they'll be exposed to the new package. > My question was whether that's really a thing in snap. It looks like that from the outside, but in practice that's not possible. All snap package names are tightly managed by Canonical staff. > I'm not quite sure what you're trying to say here. Lots of software vendors host their own archives. It's very difficult to get new packages into distros, and they're often updated infrequently once they're there. For example, the OSGeo project distributes its suite of packages this way.