--- title: Sunsetting a Package Manager | daily.dev description: CocoaPods trunk goes read-only on December 2nd, 2026, freezing new uploads while keeping existing packages resolvable via GitHub and jsDelivr. The post... canonical: https://daily.dev/posts/sunsetting-a-package-manager-vvi8rsalo twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Sunsetting a Package Manager | daily.dev og:description: CocoaPods trunk goes read-only on December 2nd, 2026, freezing new uploads while keeping existing packages resolvable via GitHub and jsDelivr. The post... og:url: https://daily.dev/posts/sunsetting-a-package-manager-vvi8rsalo og:image: https://api.daily.dev/og/posts/vvI8RSalO.png og:image:alt: Sunsetting a Package Manager og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Sunsetting a Package Manager **[Andrew Nesbitt](https://daily.dev/sources/nesbitt-io)** · 7 min read · 4 upvotes · 1 comments ## Summary CocoaPods trunk goes read-only on December 2nd, 2026, freezing new uploads while keeping existing packages resolvable via GitHub and jsDelivr. The post examines how past registries (Bower, Bintray, JCenter, Atom apm) handled their sunsets across a spectrum from full shutdown to graceful redirect. A key concern is that a frozen registry eliminates the ability to patch vulnerabilities in published packages — a critical CVE in a widely-used pod like SDWebImage would have no canonical fix path after the freeze. The author explores the tradeoffs of different read-only strategies, the mutability risks of falling back to git-backed dependencies, and proposes a security-only publishing channel as a narrow exception worth considering before the freeze date forecloses the option. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Community discussion Top comments from developers on daily.dev. **@paulmarc** · 0 upvotes > While it's always sad to see anything "sunsetted", I think it's better for the whole community. > > Existing options are much better. ## Similar posts on daily.dev - [Migrating from CocoaPods to Swift Package Manager: A Practical Guide](https://daily.dev/posts/migrating-from-cocoapods-to-swift-package-manager-a-practical-guide-jtyfkr5bh) · Medium · 0 upvotes · 0 comments - [CocoaPods Deprecation Notice for OpenTelemetry Swift](https://daily.dev/posts/cocoapods-deprecation-notice-for-opentelemetry-swift-yvphmfa0b) · OpenTelemetry · 0 upvotes · 0 comments - [Saying goodbye to CocoaPods: Swift Package Manager is soon the default in Flutter\!](https://daily.dev/posts/saying-goodbye-to-cocoapods-swift-package-manager-is-soon-the-default-in-flutter--rvjvttlan) · Flutter · 18 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#open-source](https://daily.dev/tags/open-source), [#cocoapods](https://daily.dev/tags/cocoapods) [View this post on daily.dev](https://daily.dev/posts/sunsetting-a-package-manager-vvi8rsalo) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Sunsetting a Package Manager","url":"https://daily.dev/posts/sunsetting-a-package-manager-vvi8rsalo","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/sunsetting-a-package-manager-vvi8rsalo"},"datePublished":"2026-06-23T15:13:52.105Z","dateModified":"2026-06-23T20:20:30.868Z","description":"CocoaPods trunk goes read-only on December 2nd, 2026, freezing new uploads while keeping existing packages resolvable via GitHub and jsDelivr. The post...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/416572ca2b211e96c4c4b92af22d1ec7?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/416572ca2b211e96c4c4b92af22d1ec7?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"Andrew Nesbitt","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Andrew Nesbitt","logo":"https://media.daily.dev/image/upload/logos/placeholder.jpg","url":"https://daily.dev/sources/nesbitt-io"},"commentCount":1,"discussionUrl":"https://daily.dev/posts/sunsetting-a-package-manager-vvi8rsalo","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":4},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":1}],"keywords":"security,open-source,cocoapods","timeRequired":"PT7M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Andrew Nesbitt","item":"https://daily.dev/sources/nesbitt-io"},{"@type":"ListItem","position":3,"name":"Sunsetting a Package Manager"}]} {"@context":"https://schema.org","@type":"WebPage","@id":"https://daily.dev/posts/sunsetting-a-package-manager-vvi8rsalo","comment":[{"@type":"Comment","text":"While it’s always sad to see anything “sunsetted”, I think it’s better for the whole community.\nExisting options are much better.","datePublished":"2026-06-29T04:08:48.117Z","url":"https://daily.dev/posts/vvI8RSalO#c-prLHpGSAt","author":{"@type":"Person","name":"paulmarc","url":"https://daily.dev/paulmarc","image":"https://media.daily.dev/image/upload/s--yFutR-QN--/f_auto/v1737446314/avatars/avatar_iHStoImiuFyQFvwEddWek"}}]} ```