Trending

#DependencyManagement

Latest posts tagged with #DependencyManagement on Bluesky

Latest Top
Trending

Posts tagged #DependencyManagement

Preview
Flutter Build Systems and Dependency Management: Technical Interview Guide Essential questions and detailed answers covering pubspec.yaml, build modes, flavors, and dependency resolution that experienced Flutter…

I just published Flutter Build Systems and Dependency Management: Technical Interview Guide medium.com/p/flutter-bu...
#Flutter #FlutterDevelopment #FlutterInterview #BuildSystems #DependencyManagement #Pubspec #GradleBuild #FlutterFlavors #CodeGeneration #BuildRunner #MobileDevelopment

0 0 0 0
Preview
Android Native Build Systems and Dependency Management: Interview Questions That Will Test Your… Essential Android interview Q&A on Gradle, dependency management, and build optimization. Real questions with expert answers.

I just published Android Native Build Systems and Dependency Management: Interview Questions That Will Test Your… medium.com/p/android-na...
#Android #AndroidDevelopment #Gradle #Kotlin #AndroidInterview #TechInterview #MobileDevelopment #DependencyManagement #AndroidStudio #KSP #KAPT

1 0 0 0
Preview
iOS Native Build Systems and Dependency Management: Interview Questions That Will Test Your… Essential iOS interview Q&A on Xcode build system, SPM, CocoaPods, and dependency management. Real questions with expert answers.

I just published iOS Native Build Systems and Dependency Management: Interview Questions That Will Test Your… medium.com/p/ios-native... #iOSDevelopment #Swift #Xcode #SwiftPackageManager #CocoaPods #iOSInterview #TechInterview #AppleDevelopment #MobileDevelopment #BuildSystems #DependencyManagement

1 0 0 0
Preview
Build Systems and Dependency Management in Flutter: Interview Questions That Will Test Your… Essential Flutter interview Q&A on build systems, pub, Gradle, and dependency management. Real questions with expert answers.

I just published Build Systems and Dependency Management in Flutter: Interview Questions That Will Test Your… medium.com/p/build-syst...
#Flutter #FlutterInterview #DartProgramming #MobileDevelopment #BuildSystems #DependencyManagement #Gradle #CocoaPods #PubDev #FlutterDeveloper #TechInterview

0 0 0 0
Quote is "Always plan ahead. It wasn't raining when Noah built the ark." Richard Cushing.
Card from PM. ProjectManager

Quote is "Always plan ahead. It wasn't raining when Noah built the ark." Richard Cushing. Card from PM. ProjectManager

Thought of the day: The thing that most people do not consider enough when planning and managing risk are the dependencies. Whether you are dependent on another project or they are dependent on you, knowing your dependencies is critical to success.
#dependencymanagement

1 0 0 0
Preview
A local environment for DependencyTrack with Docker Compose A local DependencyTrack environment with Docker Compose for development and experimentation.

On the #norsys blog, I've just posted an article which explains how building a local development environment for @dependencytrack.bsky.social with Docker Compose, code and examples included.

medium.com/norsys-octog...

#DependencyTrack #Trivy #Docker #DockerCompose #Security #DependencyManagement

1 1 0 0
Preview
DEV Track Spotlight: Compile blazing-fast MCP servers in Rust (DEV405) Learn how to build production-ready MCP servers in Rust from Darko Mesaros (AWS Principal Developer Advocate), featuring live coding demonstrations, real-world examples with receipt printers, and practical...

🚀📝 DEV Track Spotlight: Compile blazing-fast MCP servers in Rust (DEV405)

#RustProgramming #MCPServers #DependencyManagement #AWSreInvent #CodeTalk

0 0 0 0

Commenters contrast `uv` with older tools like `venv`, `poetry`, and `pip`. `uv` excels in speed, ease of use, and seamless management of Python versions & virtual environments, simplifying complex setups previously. #DependencyManagement 3/6

0 0 1 0

Mitigating shared dependency issues in microservices requires discipline: robust versioning, ensuring backward compatibility, and planning for schema evolution. Without these, the benefits of independent services quickly erode. #DependencyManagement 3/6

0 0 1 0

The core debate: update dependencies immediately for CVEs, or delay to prevent supply chain attacks/new bugs? A balanced approach is key, prioritizing careful monitoring & risk assessment over blind adoption. #DependencyManagement 2/6

0 0 1 0

The discussion extends to broader dependency management. Relying on numerous, often unvetted, third-party packages significantly increases risk. Strategies like vendoring dependencies or reducing external package count can tighten security. #DependencyManagement 4/6

0 0 1 0
Package Managers are Evil n.b. This is a written version of a dialogue from a YouTube video: 2 Language Creators vs 2 Idiots | The Standup Package managers (for programming languages) are evil1. To start, I need to make a few ...

“Package Managers Are Evil”, Bill “GingerBill” Hall (www.gingerbill.org/article/2025...).

On HN: news.ycombinator.com/item?id=4516...

On Lobsters: lobste.rs/s/zvdtdn/pac...

#Programming #Packages #Dependencies #DependencyHell #PackageManagers #Rants #DependencyManagement

0 0 0 0

Today I used the phrase "transitive closure" in an engineering design document. I feel all grown up, like the first time I paid rent.

#softwareengineering #dependencymanagement

1 0 0 0

CRAN's "virtual monorepo" approach means *any* package update triggers tests for *all* its dependents. This robust system ensures high ecosystem stability by preventing breaking changes, but it's a heavy lift! #DependencyManagement 2/6

0 0 1 0
EU CRA: It's Later Than You Think, Time to Engineer Up!

EU CRA: It's Later Than You Think, Time to Engineer Up! nxdomain.no/~peter/eu_cr... (or tracked bsdly.blogspot.com/2025/09/eu-c...) #developement #EUCRA #CRA #cyberresilienceact #sbom #softwarebillofmaterials #engineering #quality #freesoftware #libresoftware #dependencies #dependencymanagement

0 0 0 0
A better future for JavaScript that won't happen

A better future for JavaScript that won't happen

drewdevault.com/2025/09/17/2...

#JavaScript #DependencyManagement #SoftwareEngineering #Security

1 0 0 0

JavaScript's culture of heavy dependency reuse presents a security trade-off. While convenient, excessive packages increase attack surfaces. A smaller, more curated dependency tree is often safer. #DependencyManagement 3/5

0 0 1 0

Dependency management was another hot topic. Rust's Cargo offers robust package handling, but Python's ecosystem, with tools like `uv`, is rapidly improving. The discussion centered on balancing ease of use with avoiding 'dependency clutter.' #DependencyManagement 5/6

0 0 1 0

A common, dangerous practice: blindly importing numerous open-source dependencies without proper understanding or security audits. This creates vast, hidden attack surfaces susceptible to exploitation. #DependencyManagement 5/6

0 0 1 0

Another defense against supply chain attacks is vendoring dependencies. This means copying them locally rather than relying on external registries, offering more control but potentially increasing maintenance overhead. #DependencyManagement 3/6

0 0 1 0

A key concern from the Nx discussion: excessive dependencies are a major supply chain vulnerability. Teams should audit dependencies, use tools like SBOMs, and consider vendoring critical libraries to reduce attack surface. #DependencyManagement 3/6

0 0 1 0

vcpkg’s ‘baseline’ system is designed for C++ complexity.

Instead of piecemeal updates, Dependabot advances the entire baseline to a newer version, avoiding ABI incompatibilities and version conflicts.

#DependencyManagement

0 0 1 0
Preview
Building a Go Dependency Scanner From Scratch

Build a Go dependency scanner with the standard library: parse go.mod, query OSV for vulnerabilities, and analyze licenses. #dependencymanagement

0 0 0 0
ReARM Feature Announcement - Alerts on SBOM Changes
ReARM Feature Announcement - Alerts on SBOM Changes YouTube video by Reliza

🚀We've just released ReARM CE 25.08.23 and ReARM Pro 25.08.20 with an exciting new feature: Automatic alerts for dependency changes with a detailed SBOM-level changelog.
youtube.com/watch?v=RfKV...
#SBOM #DevSecOps #SupplyChainSecurity #SoftwareSecurity #DependencyManagement #ReARM

1 0 0 0

External libraries & dependencies are major culprits in software rot. Abandoned libraries or breaking updates to underlying systems can cripple code. The consensus: carefully select well-maintained libraries and minimize their number. #DependencyManagement 5/6

0 0 1 0

While `uv` excels, alternatives exist. For larger projects, `pip-tools` or `Poetry` offer more robust dependency locking. For cross-language needs, solutions like Nix or even Go's single-binary approach were discussed. #DependencyManagement 5/6

0 0 1 0
Preview
This Deck of Cards Might Fix Your Broken Agile Team

The Dependency Discovery Deck is an interactive tool designed specifically for developers and agile teams. #dependencymanagement

0 0 0 0

A major risk of auto-updating dependencies (like with Dependabot) is introducing hidden bugs, breaking changes, or even malicious code if not properly reviewed & tested. Don't blindly trust automation! Manual oversight is key. #DependencyManagement 2/6

0 0 1 0