Dependency review | Flow Town

← Engineer roadmap

Dependency management

Dependency review

Dependency review examines what a new dependency introduces. Check maintenance, licence, known vulnerabilities, and transitive packages.

Resources

Our software dependency problemArticle · Russ Cox · opens in a new tab OpenSSF ScorecardReference · OpenSSF · opens in a new tab Open Source Insights (deps.dev)Reference · Google · opens in a new tab GitHub: about dependency reviewDocumentation · GitHub · opens in a new tab

Find this topic in

CI/CD Engineer ↗DevSecOps ↗