#dependencies

5 pages search “dependencies” ↳ all tags

Wiki 5

Dependency Vendoring Committing dependency source into your repo as a fire-break against automatic propagation
Git submodules as a package manager Nesbitt reads submodules as a package manager - gitlink as lockfile, .gitmodules as manifest - and finds resolution, storage and updates each worse
Installing Ruby gems with go get Nesbitt points GOPATH at a Ruby load path — and gets a transparency log RubyGems doesn't have
Reuse Less Software We reuse too much software now; vendor every dependency as a fire-break against supply-chain attacks
Supply Chain Security Protecting code-to-artifact chain: CI/CD, dependencies, registries, releases, defense patterns