Writing · Nº 041065 essays
The writing
Ideas from inside the work. Explore technology, entrepreneurship, and the practice of building things that last.
4 essays found · Page 1 of 1
Clear filtersEngineeringLockfiles and Supply Chain Integrity, ExplainedYour lockfile is the last line of defense for supply chain integrity. Learn what it protects, how it fails, and how to verify what actually ships in your build.EngineeringWhich CVE Alerts Actually Matter in Your RepoMost CVE alerts in your dependency scanner are noise. Learn how reachability and context decide which vulnerability alerts are real risk worth fixing now.EngineeringHow to Measure Dependency Drift Before It BitesDependency drift is how far your packages have fallen behind current versions. Learn to measure library lag as a risk metric and decide what to update first.EngineeringYour Transitive Dependencies Are the Real RiskThe dependencies you import are not the problem. Their dependencies are. Here is how transitive dependency risk hides and how to actually measure it.