Recent posts tagged dependencies

You don't notice your GitHub Actions versions until you start getting warnings about things like "Node 20 is no longer supported". When you think about it, GitHub Actions are yet another dependency that needs to be kept up to date and present supply ...

Since its inception in 2013, OWASP Dependency-Track1 has been at the forefront of analysing Software Bill of Materials SBOM for cybersecurity risk identification and reduction. Dependency-Track allows organisations and governments to operationalise S...

When a code project grows complex it's going to be difficult to understand which depends on which - developers familiar with the C# ecosystem can look at NuGet Package Manager and use .csproj to try to study things but when the hierarchy gets complex...

Recently, my good friend Richard Fichtner advised using the mvn dependency:analyze command to get rid of declared but unused dependencies: There is another use case for mvn dependency:analyze It can show you the dependencies you use in your code b...