The article may say that an SPM is "not why we are here today" but writing any package manager is 1) phenomenally difficult and 2) has incredible risk to system integrity and security. You could do worse that starting out with reading and understanding RPM (https://github.com/rpm-software-management/rpm) or dpkg (https://git.dpkg.org/cgit/dpkg/dpkg.git).