The Source Ruckus Packager (SRP) is a lightweight, yet fully-featured package manager. The target audience for this packager is not the big-time distribution developers, but a single user rolling his or her own at home (or in a small office). This utility is part of the Source Ruckus project.
debcheckroot is a tool that retrieves file checksums online or from read only media. It provides trusted verification of your root file system at least as far as you can trust your Internet connection or your verification medium (DVD, BD, etc.). Unlike debsums, it doesn't rely on locally stored md5sums which can be modified by an attacker along with the files themselves. It also provides cleaner and better structured output, and can spot files added to your system by someone else.
checkroot is an openSUSE equivalent of debsums. It enables retrieval of fingerprint updates online, allowing trusted verification of a root filesystem. This prevents a cracker from hiding his traces from "rpm --verify -a". If the verification fails, checkroot can download the package header containing the md5sums online. Alternatively, all md5sums can be fetched online (if you mistrust some of the fingerprints/private keys the locally stored md5sums are signed with).
Sincerity is a tool for installing and bootstrapping software stacks on top of the JVM. It makes these otherwise tedious tasks easy, simple, and fun. Your Sincerity containers are straightforward development playgrounds. Simply create a new container when you want to try out a new approach. Delete the directory when done, and it's as if nothing ever happened. Sincerity's growing ecology of plugins makes it especially easy to add powerful features to your product, such as centralized logging and robust daemons with surprisingly minimal fuss.
dput-webdav is a "dput" upload method plugin with extended WebDAV support. It was written specifically with Artifactory and Bintray in mind. It tries to be compatible with the "http" plugin, but offers additional features: login credentials can include the password, "incoming" can be a full URL (optionally containing dynamic package metadata, and supporting HTTPS), and distributions can be mapped to repository names.
ivepkg is a package manager with a focus on homebuilt distributions like Linux From Scratch. Therefore, ivepkg has no repository or network abilities, but is specialized on installing tarballs to a system. Its key features are an easy-to-use database (sqlite3) and a sha1 checksum of every installed file. These make it possible to know which files have been altered (for example, by a malicious attack).
Conary is a distributed software management system for Linux distributions. It replaces traditional package management solutions (such as RPM and dpkg) with one designed to enable loose collaboration across the Internet. It enables sets of distributed and loosely connected repositories to define the components which are installed on a Linux system. Rather than having a full distribution come from a single vendor, it allows administrators and developers to branch a distribution, keeping the pieces which fit their environment while grabbing components from other repositories across the Internet.