They could take a look at how pkgsrc [1] works.

[1] https://www.pkgsrc.org/

pkgsrc is great, I use this on smartos (as just an end user) and it’s extremely straightforward