The strongest test of dependency management is a safe simulation of the case where old packages accumulate security and compatibility debt.
#DependencyManagement #DeveloperTips #ProfessionalGrowth
#DependencyManagement #DeveloperTips #ProfessionalGrowth
August 10, 2026 at 10:04 PM
The strongest test of dependency management is a safe simulation of the case where old packages accumulate security and compatibility debt.
#DependencyManagement #DeveloperTips #ProfessionalGrowth
#DependencyManagement #DeveloperTips #ProfessionalGrowth
The most useful signal for dependency management is age of critical dependencies and failed upgrades.
#DependencyManagement #CleanCode #WorkSmarter
#DependencyManagement #CleanCode #WorkSmarter
August 13, 2026 at 3:09 AM
The most useful signal for dependency management is age of critical dependencies and failed upgrades.
#DependencyManagement #CleanCode #WorkSmarter
#DependencyManagement #CleanCode #WorkSmarter
BOM imports are supported too:
$ mvn dependency:add \
-Dgav=groupId:artifactId \
-Dscope=import \
-Dmanaged
This writes the BOM correctly into "<dependencyManagement>".
$ mvn dependency:add \
-Dgav=groupId:artifactId \
-Dscope=import \
-Dmanaged
This writes the BOM correctly into "<dependencyManagement>".
May 28, 2026 at 4:12 PM
BOM imports are supported too:
$ mvn dependency:add \
-Dgav=groupId:artifactId \
-Dscope=import \
-Dmanaged
This writes the BOM correctly into "<dependencyManagement>".
$ mvn dependency:add \
-Dgav=groupId:artifactId \
-Dscope=import \
-Dmanaged
This writes the BOM correctly into "<dependencyManagement>".
Want to add to "<dependencyManagement>" instead of "<dependencies>"?
$ mvn dependency:add \
-Dgav=groupId:artifactId \
-Dmanaged
Very useful for parent POMs and centralized version management.
$ mvn dependency:add \
-Dgav=groupId:artifactId \
-Dmanaged
Very useful for parent POMs and centralized version management.
May 28, 2026 at 4:12 PM
Want to add to "<dependencyManagement>" instead of "<dependencies>"?
$ mvn dependency:add \
-Dgav=groupId:artifactId \
-Dmanaged
Very useful for parent POMs and centralized version management.
$ mvn dependency:add \
-Dgav=groupId:artifactId \
-Dmanaged
Very useful for parent POMs and centralized version management.
That's what happens when you stop building everything yourself and start building platforms. You create interfaces. You remove bottlenecks. You win.
#scrum #agile #dependencymanagement #platformbusinessmodel #apidesign #b2b #softwaredevelopment #devops #jira #confluence (25/25)
#scrum #agile #dependencymanagement #platformbusinessmodel #apidesign #b2b #softwaredevelopment #devops #jira #confluence (25/25)
June 8, 2026 at 12:40 PM
That's what happens when you stop building everything yourself and start building platforms. You create interfaces. You remove bottlenecks. You win.
#scrum #agile #dependencymanagement #platformbusinessmodel #apidesign #b2b #softwaredevelopment #devops #jira #confluence (25/25)
#scrum #agile #dependencymanagement #platformbusinessmodel #apidesign #b2b #softwaredevelopment #devops #jira #confluence (25/25)
Useful documentation for dependency management starts with the scenario where old packages accumulate security and compatibility debt.
#DependencyManagement #Programming #ProblemSolving
#DependencyManagement #Programming #ProblemSolving
August 9, 2026 at 7:51 PM
Useful documentation for dependency management starts with the scenario where old packages accumulate security and compatibility debt.
#DependencyManagement #Programming #ProblemSolving
#DependencyManagement #Programming #ProblemSolving
A named owner for dependency management should know the current state of age of critical dependencies and failed upgrades.
#DependencyManagement #SoftwareEngineering #TechInsights
#DependencyManagement #SoftwareEngineering #TechInsights
August 10, 2026 at 2:47 AM
A named owner for dependency management should know the current state of age of critical dependencies and failed upgrades.
#DependencyManagement #SoftwareEngineering #TechInsights
#DependencyManagement #SoftwareEngineering #TechInsights
Recovery for dependency management is complete when age of critical dependencies and failed upgrades returns to its normal range and the cause is recorded.
#DependencyManagement #CodeQuality #LessonsLearned
#DependencyManagement #CodeQuality #LessonsLearned
August 12, 2026 at 1:22 AM
Recovery for dependency management is complete when age of critical dependencies and failed upgrades returns to its normal range and the cause is recorded.
#DependencyManagement #CodeQuality #LessonsLearned
#DependencyManagement #CodeQuality #LessonsLearned
That is not related to a lock file... it's just having a two deps which using another lib as transitive BUT in two different versions... that can be solved easily via adding the version you like to have in the dependencyManagement..
December 10, 2024 at 5:47 PM
That is not related to a lock file... it's just having a two deps which using another lib as transitive BUT in two different versions... that can be solved easily via adding the version you like to have in the dependencyManagement..
Change dependency management only when the decision can improve age of critical dependencies and failed upgrades without sacrificing the outcome where updates stay routine instead of becoming emergency projects.
#DependencyManagement #CodeQuality #BuildBetter
#DependencyManagement #CodeQuality #BuildBetter
August 12, 2026 at 4:20 PM
Change dependency management only when the decision can improve age of critical dependencies and failed upgrades without sacrificing the outcome where updates stay routine instead of becoming emergency projects.
#DependencyManagement #CodeQuality #BuildBetter
#DependencyManagement #CodeQuality #BuildBetter
#dsdm #agile #dependencymanagement #healthcaretech #teamcoordination #brandextension #agileleadership #projectmanagement #healthcaremarketplace #crossteamcollaboration (50/50)
June 11, 2026 at 2:10 AM
#saas #scrum #dependencymanagement #globaldeliverymodel #agile #teamcoordination #softwaredelivery #projectmanagement #engineeringleadership #infosys (27/27)
June 10, 2026 at 8:37 AM
On the #norsys blog, I've just posted an article which explains how building a local development environment for @dependencytrack.bsky.social with Docker Compose, code and examples included.
medium.com/norsys-octog...
#DependencyTrack #Trivy #Docker #DockerCompose #Security #DependencyManagement
medium.com/norsys-octog...
#DependencyTrack #Trivy #Docker #DockerCompose #Security #DependencyManagement
A local environment for DependencyTrack with Docker Compose
A local DependencyTrack environment with Docker Compose for development and experimentation.
medium.com
January 29, 2026 at 3:26 PM
On the #norsys blog, I've just posted an article which explains how building a local development environment for @dependencytrack.bsky.social with Docker Compose, code and examples included.
medium.com/norsys-octog...
#DependencyTrack #Trivy #Docker #DockerCompose #Security #DependencyManagement
medium.com/norsys-octog...
#DependencyTrack #Trivy #Docker #DockerCompose #Security #DependencyManagement
The purpose of dependency management is simple: updates stay routine instead of becoming emergency projects.
#DependencyManagement #Programming #DigitalSkills
#DependencyManagement #Programming #DigitalSkills
August 12, 2026 at 3:53 PM
The purpose of dependency management is simple: updates stay routine instead of becoming emergency projects.
#DependencyManagement #Programming #DigitalSkills
#DependencyManagement #Programming #DigitalSkills
Design a plain-language recovery message for the case where old packages accumulate security and compatibility debt.
#DependencyManagement #DeveloperTips #PracticalTips
#DependencyManagement #DeveloperTips #PracticalTips
August 7, 2026 at 2:39 AM
Design a plain-language recovery message for the case where old packages accumulate security and compatibility debt.
#DependencyManagement #DeveloperTips #PracticalTips
#DependencyManagement #DeveloperTips #PracticalTips
Today I used the phrase "transitive closure" in an engineering design document. I feel all grown up, like the first time I paid rent.
#softwareengineering #dependencymanagement
#softwareengineering #dependencymanagement
October 1, 2025 at 12:01 AM
Today I used the phrase "transitive closure" in an engineering design document. I feel all grown up, like the first time I paid rent.
#softwareengineering #dependencymanagement
#softwareengineering #dependencymanagement
The costly assumption in dependency management is that old packages accumulate security and compatibility debt will fix itself.
#DependencyManagement #SoftwareEngineering #TechAdvice
#DependencyManagement #SoftwareEngineering #TechAdvice
August 15, 2026 at 8:23 PM
The costly assumption in dependency management is that old packages accumulate security and compatibility debt will fix itself.
#DependencyManagement #SoftwareEngineering #TechAdvice
#DependencyManagement #SoftwareEngineering #TechAdvice
A better future for JavaScript that won't happen
drewdevault.com/2025/09/17/2...
#JavaScript #DependencyManagement #SoftwareEngineering #Security
drewdevault.com/2025/09/17/2...
#JavaScript #DependencyManagement #SoftwareEngineering #Security
A better future for JavaScript that won't happen
drewdevault.com
September 17, 2025 at 12:52 PM
A better future for JavaScript that won't happen
drewdevault.com/2025/09/17/2...
#JavaScript #DependencyManagement #SoftwareEngineering #Security
drewdevault.com/2025/09/17/2...
#JavaScript #DependencyManagement #SoftwareEngineering #Security
"Just fixed a pesky deployment issue on vercel by adding a lockfile for our dependencies. Now we're good to go! Thanks for the peace of mind, future self #devlife #dependencymanagement"
March 4, 2026 at 2:25 AM
"Just fixed a pesky deployment issue on vercel by adding a lockfile for our dependencies. Now we're good to go! Thanks for the peace of mind, future self #devlife #dependencymanagement"
The business cost of weak dependency management becomes visible in age of critical dependencies and failed upgrades and repeated rework.
#DependencyManagement #CleanCode #BestPractices
#DependencyManagement #CleanCode #BestPractices
August 14, 2026 at 9:50 PM
The business cost of weak dependency management becomes visible in age of critical dependencies and failed upgrades and repeated rework.
#DependencyManagement #CleanCode #BestPractices
#DependencyManagement #CleanCode #BestPractices
Go developers: Are you tracking your package dependencies?
As we scale our codebase, we are adding dependency tests to ensure our Go packages are decoupled.
🚀 Read now: https://buff.ly/4gsfOWn
#Golang #SoftwareDevelopment #SoftwareArchitecture #DependencyManagement
As we scale our codebase, we are adding dependency tests to ensure our Go packages are decoupled.
🚀 Read now: https://buff.ly/4gsfOWn
#Golang #SoftwareDevelopment #SoftwareArchitecture #DependencyManagement
How to find package dependencies of a Go package
2 ways to find and check that your Go package is dependent on specific other packages
victoronsoftware.com
February 5, 2025 at 3:46 PM
Go developers: Are you tracking your package dependencies?
As we scale our codebase, we are adding dependency tests to ensure our Go packages are decoupled.
🚀 Read now: https://buff.ly/4gsfOWn
#Golang #SoftwareDevelopment #SoftwareArchitecture #DependencyManagement
As we scale our codebase, we are adding dependency tests to ensure our Go packages are decoupled.
🚀 Read now: https://buff.ly/4gsfOWn
#Golang #SoftwareDevelopment #SoftwareArchitecture #DependencyManagement
Thought of the day: Dependency management is often forgotten in planning yet it is such an essential part of the activity. Knowing the critical dependencies is vital to ensuring progress and too many dependencies can kill forward momentum.
#dependencymanagement #dependencymapping #dependency
#dependencymanagement #dependencymapping #dependency
June 5, 2025 at 6:53 AM
Thought of the day: Dependency management is often forgotten in planning yet it is such an essential part of the activity. Knowing the critical dependencies is vital to ensuring progress and too many dependencies can kill forward momentum.
#dependencymanagement #dependencymapping #dependency
#dependencymanagement #dependencymapping #dependency
. Because two small XP teams learned to manage their dependencies from a cosmetics pioneer who proved that an ethical framework is the most reliable dependency management tool ever built.
#xp #agile #dependencymanagement #ethicalbusiness #teamcollaboration #pairprogramming #extremeprogramming […]
#xp #agile #dependencymanagement #ethicalbusiness #teamcollaboration #pairprogramming #extremeprogramming […]
Original post on streetwi.se
streetwi.se
June 5, 2026 at 8:57 AM
. Because two small XP teams learned to manage their dependencies from a cosmetics pioneer who proved that an ethical framework is the most reliable dependency management tool ever built.
#xp #agile #dependencymanagement #ethicalbusiness #teamcollaboration #pairprogramming #extremeprogramming […]
#xp #agile #dependencymanagement #ethicalbusiness #teamcollaboration #pairprogramming #extremeprogramming […]
dependencies. In other words, multiple projects can use different versions of the same source-only package without causing conflicts. It's a perfect technique to avoid diamond dependencies.
Check it out at github.com/dennisdoomen...
#mvpbuzz #dependencymanagement #nuget #dotnet #sourceonly
Check it out at github.com/dennisdoomen...
#mvpbuzz #dependencymanagement #nuget #dotnet #sourceonly
GitHub - dennisdoomen/dotnet-package-templates: "dotnet new" templates for building NuGet-published (content-only) multi-targeting libraries with all the bells and whistles
"dotnet new" templates for building NuGet-published (content-only) multi-targeting libraries with all the bells and whistles - dennisdoomen/dotnet-package-templates
github.com
March 26, 2025 at 3:49 PM
dependencies. In other words, multiple projects can use different versions of the same source-only package without causing conflicts. It's a perfect technique to avoid diamond dependencies.
Check it out at github.com/dennisdoomen...
#mvpbuzz #dependencymanagement #nuget #dotnet #sourceonly
Check it out at github.com/dennisdoomen...
#mvpbuzz #dependencymanagement #nuget #dotnet #sourceonly
Dependency yönetimi savaşlarından çıkardığım dersler: Monorepo mu, Polyrepo mu?
#DependencyManagement #Monorepo #Polyrepo #YazilimMimarisi
https://mustafaerbay.com.tr/blog/technology/dependency-yonetimi-monorepo-vs-polyrepo-yaklasimi/
#DependencyManagement #Monorepo #Polyrepo #YazilimMimarisi
https://mustafaerbay.com.tr/blog/technology/dependency-yonetimi-monorepo-vs-polyrepo-yaklasimi/
Dependency Yönetimi: Monorepo mu, Polyrepo mu? Benim Seçimlerim
Yazılım projelerinde dependency yönetimi için monorepo ve polyrepo yaklaşımlarını kendi tecrübelerimle karşılaştırıyorum. Avantajlar, dezavantajlar ve pratik…
mustafaerbay.com.tr
May 30, 2026 at 12:17 PM
Dependency yönetimi savaşlarından çıkardığım dersler: Monorepo mu, Polyrepo mu?
#DependencyManagement #Monorepo #Polyrepo #YazilimMimarisi
https://mustafaerbay.com.tr/blog/technology/dependency-yonetimi-monorepo-vs-polyrepo-yaklasimi/
#DependencyManagement #Monorepo #Polyrepo #YazilimMimarisi
https://mustafaerbay.com.tr/blog/technology/dependency-yonetimi-monorepo-vs-polyrepo-yaklasimi/