&gt; apt-pinning FTW!<p>You should take look at OpenSuSE&#x27;s zypper.<p>- 3 sat solver for dependencies (not just greedy algorithm; If there are conflicts it can propose you possible solutions that include uninstalling upgrading&#x2F;downgrading packages)<p>- packages stick by default to the repositories they were installed from<p>- patches (i.e. sets of updated packages to address specific issue) it tells you what was fixed. You can for example only install patches that fix specific security issue, by using --cve opetion.<p>- zypper ps tells you which processes need to be restarted after upgrade to make changes effective<p>- OBS (Open Build System), basically it&#x27;s like a github for packages. You upload spec files and it generates packages for you. You can fork someone&#x27;s definitions and make customizations etc. The repo is searchable from <a href="http:&#x2F;&#x2F;software.opensuse.org" rel="nofollow">http:&#x2F;&#x2F;software.opensuse.org</a>. This actually supports other distributions and packaging systems, but unfortunately most packages there are for SuSE.