installation.) A package's requirements list is shown in its help
buffer.
-@vindex package-archives
By default, packages are downloaded from a single package archive
maintained by the Emacs developers. This is controlled by the
variable @code{package-archives}, whose value is a list of package
wish to use third party package archives---but do so at your own risk,
and use only third parties that you think you can trust!
+@defopt package-archives
+The value of this variable is an alist of package archives recognized
+by the Emacs package manager.
+
+Each alist element corresponds to one archive, and should have the
+form @code{(@var{id} . @var{location})}, where @var{id} is the name of
+the archive (a string) and @var{location} is its @dfn{base location}
+(a string).
+
+If the base location starts with @samp{http:} or @samp{https:}, it
+is treated as an HTTP(S) URL, and packages are downloaded from this
+archive via HTTP(S) (as is the case for the default GNU archive).
+
+Otherwise, the base location should be a directory name. In this
+case, Emacs retrieves packages from this archive via ordinary file
+access. Such local archives are mainly useful for testing.
+@end defopt
+
@anchor{Package Signing}
@cindex package security
@cindex package signing
@url{https://elpa.nongnu.org, non-GNU ELPA}. This section describes
how to set up and maintain a package archive.
-@cindex base location, package archive
-@defopt package-archives
-The value of this variable is an alist of package archives recognized
-by the Emacs package manager.
-
-Each alist element corresponds to one archive, and should have the
-form @code{(@var{id} . @var{location})}, where @var{id} is the name of
-the archive (a string) and @var{location} is its @dfn{base location}
-(a string).
-
-If the base location starts with @samp{http:} or @samp{https:}, it
-is treated as an HTTP(S) URL, and packages are downloaded from this
-archive via HTTP(S) (as is the case for the default GNU archive).
-
-Otherwise, the base location should be a directory name. In this
-case, Emacs retrieves packages from this archive via ordinary file
-access. Such local archives are mainly useful for testing.
-@end defopt
-
A package archive is simply a directory in which the package files,
and associated files, are stored. If you want the archive to be
reachable via HTTP, this directory must be accessible to a web server;