@samis @garbados @h the OS's package manager (like apt or pacman) would be fully p2p. It wouldn't even talk to a central server to get the package list - rather, you'd have a list of maintainers (they put packages in an append-only stream), some packagers the maintainers grab packages from, and another stream for metadata, basically saying "these are the packages and versions I can currently recommend installing" (the "package db" as some distros call it).