I'd recommend against using Quicklisp, its security practices are dubious.
I instead recommend cloning repositories (or symlinking them) to $XDG_DATA_HOME/common-lisp/source after auditing them.
Then in $XDG_CONFIG_HOME/common-lisp/source-registry.conf.d/50-user.conf writing: (:tree (:home ".local/share/common-lisp/source"))
This will allow ASDF to use sanely-handled dependencies.
If somewhat-automatic installation of libraries not in one's distribution is desirable, then the use of Guix and adding its path equivalent under $GUIX_PROFILE to the source-registry.conf.d configurations would be an option.
All this per the info manual: (info "(asdf) Controlling where ASDF searches for systems")
