Quicklisp is great, it's the defacto standard, but compared to OCICL it kinda feels ancient. There's also CLPM, but last time I checked it was broken by a combination of dead links and missing functions.
Last time I checked quicklisp also didn’t support https and doesn’t do any signature checking.
Last time I checked quicklisp also didn’t support https and doesn’t do any signature checking.