Skip to content
Standard Reader
Log in
Tag

Dependencies

Articles and publications tagged Dependencies across the Atmosphere.

23articles4publications
Andrew Nesbitt
Andrew NesbittSep 1, 2026
Git Submodules as a Package Manager
.gitmodules is a manifest and the gitlink is a lockfile entry.
gitpackage-managers
Andrew Nesbitt
Andrew NesbittAug 27, 2026
Bazel Module Versions Aren't SemVer
According to strict SemVer, protobuf's latest Bazel release is from 2022.
package-managersecosyste.ms
Angular-Buch
Angular-BuchAug 13, 2026
Angular mit pnpm: sichere Dependencys und Best Practices
Die Zeiten, in denen der Paketmanager npm alternativlos war, sind längst vorbei. Mit pnpm steht ein alternativer Paketmanager zur Verfügung, der effizienter mit Speicherplatz umgeht, schneller installiert und moderne Sicherheitsmechanismen gegen Supply-Chain-Angriffe mitbringt.
Angularpnpm
Andrew Nesbitt
Andrew NesbittJul 28, 2026
Why npm Dependency Trees Are So Big
Two versions of lodash walk into a tree
package-managersnpm
Andrew Nesbitt
Andrew NesbittJul 10, 2026
Package Management as Org Chart
Conway's Law applied to dependency management designs.
package-managersdependencies
Andrew Nesbitt
Andrew NesbittJun 18, 2026
Open Source vs the Invisible Hand
Ten million downloads a week, one maintainer, zero dollars.
open-sourcemaintainers
Andrew Nesbitt
Andrew NesbittMay 22, 2026
Dependency Pruning
A survey of unused-dependency detectors
supply-chaindependencies
Andrew Nesbitt
Andrew NesbittMay 7, 2026
Free as in Tribbles
The next metaphor after free-as-in-puppy
open-sourcedependencies
Andrew Nesbitt
Andrew NesbittApr 6, 2026
The Cathedral and the Catacombs
Stretching a metaphor deep into the floor.
open-sourcedependencies
Andrew Nesbitt
Andrew NesbittFeb 27, 2026
xkcd 2347
An interactive version of the dependency comic.
dependenciesopen-source
Andrew Nesbitt
Andrew NesbittFeb 23, 2026
Where Do Specifications Fit in the Dependency Tree?
RFC 9110 is a phantom dependency with thousands of transitive dependents.
package-managersdependencies
Andrew Nesbitt
Andrew NesbittFeb 10, 2026
Lockfiles Killed Vendoring
Why almost nobody vendors their dependencies anymore.
package-managersdeep-dive
Andrew Nesbitt
Andrew NesbittFeb 6, 2026
Dependency Resolution Methods
A reference on how package managers solve the version constraint satisfaction problem, from SAT solvers to content-addressed stores.
package-managersreference
Andrew Nesbitt
Andrew NesbittJan 20, 2026
The Lesser Evil of Compliance: Enterprise SBOM Strategy for CRA Readiness
You are not paid to find good options. You are paid to choose.
package-managersdependencies
Andrew Nesbitt
Andrew NesbittJan 10, 2026
16 Best Practices for Reducing Dependabot Noise
A practical guide to ignoring security updates responsibly
package-managersdependencies
Andrew Nesbitt
Andrew NesbittJan 2, 2026
How Dependabot Actually Works
Inside dependabot-core's architecture, its reliance on proprietary GitHub infrastructure, and open source alternatives
package-managersgithub
Andrew Nesbitt
Andrew NesbittDec 15, 2025
How I Assess Open Source Libraries
What I actually look at when deciding whether to adopt a dependency.
package-managersdependencies
Andrew Nesbitt
Andrew NesbittDec 9, 2025
Why I'm Fascinated by Package Management
From gaming magazine CDs to dependency graphs
package-managershistory
Andrew Nesbitt
Andrew NesbittNov 15, 2025
Package Manager Timeline
A chronological timeline of package manager releases, major milestones, and significant events in the history of software dependency management.
package-managershistory
Andrew Nesbitt
Andrew NesbittNov 13, 2025
Package Management Papers
A collection of academic research papers on package management systems, dependency resolution, supply chain security, and software ecosystems.
package-managersresearch
Devtools FM
Devtools FMDec 15, 2022
Rúnar Bjarnason - Unison
Rúnar Bjarnason introduces Unison, a functional programming language with content-addressed code for distributed systems.
programmingprogramming languages
sunshowers
sunshowersAug 22, 2020
Thinking about dependencies
Opinions about relying on other people's work.
dependencies
Andrew Nesbitt
Andrew NesbittFeb 24, 2017
Exploring Unseen Open Source Infrastructure
Highly used open source libraries that have almost no stars or attention on GitHub.
open-sourceinfrastructure

You've reached the end.