Tag
#dependencies
2 pieces filed under “dependencies”.
Engineering · 18 Nov 2025 · 10 min
Dependency hygiene: the boring audit that saves the launch
Client codebases rot at the package.json line. Audit cadences, update windows, vendoring decisions, and the licence review nobody does until procurement asks.
engineeringdependenciessecurity
Engineering · 18 Nov 2025 · 10 minSupply-chain security for JS teams (without the panic)
A calm, runnable supply-chain security practice for JS teams: lockfile hygiene, dependency cadence, audit triage and provenance — no fear-mongering.
securitydependenciesnpm