A critique of Python's chaotic packaging ecosystem and its negative impact on Linux distribution maintainers, calling for the PSF to address the issue.
Critique of proxy.golang.org's permanent caching, which hides broken dependencies and creates hidden risks in the Go ecosystem.
A guide on how to upgrade Node.js dependencies and fix vulnerabilities after running a yarn audit, including manual and automated methods.
A guide to using Pipenv for managing Python virtual environments, focusing on deterministic dependency resolution with Pipfile.lock.
Analyzes the problems with if/else/switch statements in code and proposes a polymorphic factory object solution for better architecture.
A guide to creating and managing Python virtual environments using the native venv module, with helpful bash functions.
Explains the Facade design pattern in JavaScript, focusing on managing dependencies and simplifying complex APIs for better code maintainability.
A summary of key talks from Bazelcon 2020, covering the state of Bazel, Twitter's migration, and Pinterest's CI tool.
Explains the purpose and mechanics of package-lock.json in Node.js projects, detailing how it ensures consistent dependency installations.
A guide to properly resolving git merge conflicts in package-lock.json files without deleting them, ensuring dependency consistency across teams.
Explains how to categorize and manage stable vs. volatile dependencies in front-end architecture for better design.
Explains the differences and purposes of package.json and package-lock.json files in Node.js projects, focusing on dependency management.
Exploring best practices for declaring Clojure as a dependency in libraries, including Leiningen and CLI tools approaches.
A developer's analysis of how a minor version update in a Composer dependency caused a breaking change in a Laravel project, highlighting versioning pitfalls.
Guide on using CocoaPods solely to manage CLI tool versions in iOS projects, without integrating with Xcode.
A guide on preventing accidental global Python package installations by disabling pip outside of virtual environments.
Analyzes security risks from indirect dependencies in Angular and React boilerplate projects, comparing vulnerability counts and license issues.
A guide on using Go modules to manage and version development tools for Go projects, ensuring consistency across teams and CI/CD pipelines.
Explains the difference between library and application dependencies in Python, covering version specification and deployment reproducibility.
A guide to automating dependency updates using Dependabot, Cypress for end-to-end testing, and Netlify for CI/CD in a JavaScript/Gatsby project.
