Trending

#dependencies

Latest posts tagged with #dependencies on Bluesky

Latest Top
Trending

Posts tagged #dependencies

Preview
Supply-chain attack using invisible code hits GitHub and other repositories Unicode that's invisible to the human eye was largely abandoned—until attackers took notice.

Supply-Chain Attack Using Invisible Code Hits GitHub and Other Repositories, by @dangoodin.bsky.social (@arstechnica@mastodon.social):

arstechnica.com/security/2026/03/supply-...

#security #github #dependencies

1 0 0 0
Depx | Dependency analysis Analyse your npm dependencies before you install. See direct and transitive dependency counts, lines of code, release dates, and popularity scores.

Tool: Dependencies Badge Generator, by (not on Mastodon or Bluesky):

https://depx.co/badge

#tools #exploration #images #dependencies #npm

1 1 0 0
External import maps, today! • Lea Verou A few weeks ago, I posted lamenting the current state of web dependencies. Turns out that external import maps — the lack of which I had identified as a core limitation — can be emulated today!

#Development #Techniques
External import maps, today! · Using DOM methods to inject an import map ilo.im/16b2f1 by Lea Verou

_____
#Dependencies #JavaScript #NodeModules #ImportMaps #Browsers #WebPlatform #WebDev #Frontend #DOM #JavaScript

1 0 0 0
Preview
yapping None

Guess what!

Yapping v1.1.0 is live!

pypi.org/project/yapp...
github.com/mrswats/yapp...

#Python #Dependencies

1 0 1 0
Video

Wait a minute...🤔

If you don't have to download dependencies on CI all the time, then you can reduce setup wait times by 50% or more!

🐇 #Develocity Universal Cache is here 🐇

https://gradle.com/develocity/product/universal-cache/

#CI #Dependencies #Setup #Cache #ColdStart

2 0 0 0
Post image

Not seeing a lot of democracies benefitting from US malfeasance
Canada is doing well, ONLY because we are being forced into tightening #economic & #political #alliances -aka #dependencies- with #less-democratic nations

0 1 0 0
Preview
Rely On AI And Get Left Behind LLM-based code generation comes with multiple potential gotchas for a business. More code hitting process bottlenecks like testing, review and integration makes most teams slower. More problems bei…

#Development #Pitfalls
Rely on AI and get left behind · Who will fix code no one understands anymore? ilo.im/16atf5 by Jason Gorman

_____
#Business #Engineering #Programming #Coding #AI #Dependencies #CognitiveDebt #WebDev #Frontend #Backend

1 0 0 0
Post image

Excited for #JCON EUROPE 2026? See Kevin Dubois at #JCON2026 in Cologne talking about 'Local #Development in the #AI Era'

Most of us like to do local #development. It means we’re in #control of any #dependencies, network issues/latency …

🎟️ 2026.europe.jcon.one/tickets
Free for #JUG members

0 0 0 0
Package managers are everywhere, with seemingly every language and operating system implementing
their own solution. The lack of interoperability between these systems means that multi-lingual projects
are unable to express precise dependencies across language ecosystems, and external system and hardware
dependencies are typically implicit and unversioned. We define HyperRes, a formal system for describing
versioned dependency resolution using a hypergraph that is expressive enough to model many ecosystems and
solve dependency constraints across them. We define translations from dozens of existing package managers
to HyperRes and comprehensively demonstrate that dependency resolution can work across ecosystems
that are currently distinct. This does not require users to shift their choice of package managers; instead,
HyperRes allows for the translation of packaging metadata between ecosystems, and for solving to be precisely
specialised to a particular deployment environment.

Package managers are everywhere, with seemingly every language and operating system implementing their own solution. The lack of interoperability between these systems means that multi-lingual projects are unable to express precise dependencies across language ecosystems, and external system and hardware dependencies are typically implicit and unversioned. We define HyperRes, a formal system for describing versioned dependency resolution using a hypergraph that is expressive enough to model many ecosystems and solve dependency constraints across them. We define translations from dozens of existing package managers to HyperRes and comprehensively demonstrate that dependency resolution can work across ecosystems that are currently distinct. This does not require users to shift their choice of package managers; instead, HyperRes allows for the translation of packaging metadata between ecosystems, and for solving to be precisely specialised to a particular deployment environment.

This seems very interesting, and would make an interesting talk!

Solving Package Management via Hypergraph Dependency
Resolution - arxiv.org/pdf/2506.10803

#dependencies #packagemanagement #research

2 0 0 0
Preview
The many layers of dependencies in design systems Every design system is built on something. For better and for worse.

#Development #Guidelines
Dependency layers in design systems · “Be intentional about what you own.” ilo.im/16a01d by PJ Onori

_____
#Dependencies #Decisions #Community #Expertise #Codebase #Frameworks #DesignSystems #Development #WebDev #Frontend

1 0 0 0
Post image

Secure, Reliable Terraform At Scale With Sonatype Nexus Repository Terraform has become the de facto standard for infrastructure as code (IaC). From cloud-native startups to global enterprises, tea...

#Security #Bloggers #Network #dependencies […]

[Original post on securityboulevard.com]

0 0 0 0
Original post on sonatype.com

Secure, Reliable Terraform At Scale With Sonatype Nexus Repository Terraform has become the de facto standard for infrastructure as code (IaC). From cloud-native startups to global enterprises, tea...

#repository #dependencies #Nexus #Repository #Terraform […]

[Original post on sonatype.com]

0 0 0 0
Introduction · Node.js package configuration guide

Node.js Package Configuration Guide, by @nodejs@social.lfx.dev:

https://nodejs.github.io/package-examples/

#guides #packages #dependencies #configuration #commonjs

0 1 0 0
Preview
The Nine Levels of JavaScript Dependency Hell Come, I will show you what I have seen.

#Development #Pitfalls
The 9 levels of JS dependency hell · Developers solved each problem, only to create the next ilo.im/169mic by Andrew Nesbitt

_____
#Programming #Coding #Dependencies #JavaScript #Packages #Attacks #AI #WebDev #Frontend #Backend

1 0 0 0
Preview
The Nine Levels of JavaScript Dependency Hell Come, I will show you what I have seen.

The Nine Levels of JavaScript Dependency Hell, by @andrewnez@mastodon.social:

nesbitt.io/2026/01/05/the-nine-leve...

#javascript #dependencies #maintainability

1 0 0 0
npm to Implement Staged Publishing After Turbulent Shift Off Classic Tokens

npm to Implement Staged Publishing After Turbulent Shift Off Classic Tokens, by @sarahgooding@fosstodon.org (@socketsecurity@fosstodon.org):

socket.dev/blog/npm-to-implement-st...

#npm #dependencies #security #github

0 0 0 0
Preview
Web dependencies are broken. Can we fix them? • Lea Verou Dear JS ecosystem, I love you, but you have a dependency management problem when it comes to the Web, and the time has come for an intervention.

Web Dependencies Are Broken—Can We Fix Them?, by @leaverou@front-end.social:

https://lea.verou.me/blog/2026/web-deps/

#dependencies #javascript #importmaps #webplatform

1 0 0 0
Preview
Web dependencies are broken. Can we fix them? • Lea Verou Dear JS ecosystem, I love you, but you have a dependency management problem when it comes to the Web, and the time has come for an intervention.

#Development #Proposals
Web dependencies are broken · “The time has come for an intervention.” ilo.im/169obu by Lea Verou

_____
#Dependencies #JavaScript #Bundlers #NodeModules #ImportMaps #CDNs #Browsers #WebPlatform #WebDev #Frontend

3 0 0 0
The Package Management Landscape A directory of tools, systems, and services that relate to package management.

The Package Management Landscape, by @andrewnez@mastodon.social:

nesbitt.io/2026/01/03/the-package-m...

#dependencies #tooling #overviews #linklists

0 0 0 0
That's Some Other Dev's Problem

That's Some Other Dev's Problem

That's Some Other Dev's Problem

#Juniorvssenior #npm #dependencies #Technicaldebt #Developerexperience

programmerhumor.io/javascript-memes/thats-s...

2 0 1 0
Preview
How We're Protecting Our Newsroom from npm Supply Chain Attacks | pnpm We got lucky with Shai-Hulud 2.0.

How We’re Protecting Our Newsroom From npm Supply Chain Attacks, by @ryansobol.com (@pnpm@fosstodon.org):

pnpm.io/blog/2025/12/05/newsroom...

#npm #dependencies #security #casestudies

1 0 1 0
Preview
Gemnasium vs Snyk: Choosing the Right Dependency Scanner A practical comparison of Gemnasium and Snyk for dependency security, workflow fit, and coverage.

Gemnasium vs Snyk: Choosing the Right Dependency Scanner
A practical comparison of Gemnasium and Snyk for dependency security, workflow fit, and coverage.
https://whitespots.io/blog/gemnasium-vs-snyk
#dependencies #supplychain #DevSecOps

0 0 0 0
Preview
No more tokens! Locking down npm Publish Workflows—zachleat.com A post by Zach Leatherman (zachleat)

No More Tokens—Locking Down npm Publish Workflows, by @zachleat@zachleat.com:

https://www.zachleat.com/web/npm-security/

#npm #dependencies #security #github #processes

0 0 0 0
Camel Case Because I Have To

Camel Case Because I Have To

Camel Case Because I Have To

#javascript #npm #node_modules #dependencies #Package-hell

programmerhumor.io/javascript-memes/camel-c...

0 0 1 0
Include Math And Pray For Mercy

Include Math And Pray For Mercy

Include Math And Pray For Mercy

#Math #Libraries #dependencies #Cleancode #Softwareengineering

programmerhumor.io/math-memes/include-math-...

1 0 1 0