A developer shares their experience migrating their Neovim configuration from lazy.nvim to the rocks.nvim package manager, discussing its benefits and drawbacks.
Discusses the challenges of keeping software dependencies updated and compares manual vs. automated strategies for managing updates effectively.
An open source maintainer explains why automated security reports about nested dependencies are often unhelpful and asks developers to stop sending them.
A reference list of Maven coordinates (groupId and artifactId) for the most popular JDBC drivers, sourced from jOOQ integration tests.
A guide to configuring Dependabot for automated npm dependency updates, including targeted updates for critical packages.
A developer's detailed account of the challenges faced while migrating a Python package from setup.py to pyproject.toml for Python 3.12 support.
A guide to using Nix for creating isolated, per-project development environments to manage different dependency versions without conflicts.
A developer's analysis of when to write custom code versus using open-source packages, considering maintenance, team skills, and bundle size.
A developer argues for proactively cleaning up unused code and dependencies to prevent future technical debt and hidden bugs.
A guide on implementing Dependabot for automated dependency updates and vulnerability management to improve software supply chain security.
A developer explores issues building Apache Flink with modern Maven due to blocked HTTP repositories in dependencies, offering troubleshooting insights.
A developer details issues building Apache Flink with modern Maven due to blocked HTTP repositories in dependencies, offering troubleshooting insights.
Explains and resolves the 'Cannot resolve symbol VERSION_3_17' compilation error in jOOQ generated code due to version mismatches.
A developer details their journey rewriting their personal blog's static site generator from Haskell/Hakyll to a custom Rust solution to improve speed and reduce dependencies.
Explains how to use Directory.Packages.props to centrally manage NuGet package versions across multiple projects in a .NET solution.
Explains how to upgrade indirect npm dependencies, covering semantic versioning, caret/tilde ranges, and practical steps for security updates.
A developer shares the process of creating and distributing a Lua package using LuaRocks, despite the package being unfinished and having quirks.
Practical strategies for updating PHP projects when external dependencies don't yet support the latest PHP version, including testing, contributing, and finding alternatives.
Explains how to use a specific folder from a GitHub repository as an npm dependency using the degit tool.
Satirical proposal to pay developers to delete npm modules, highlighting security risks of excessive dependencies in the Node ecosystem.
