#dependency-management

[ follow ]
Information security
fromInfoQ
1 week ago

Trust No One: Securing the Modern Software Supply Chain with Zero Trust

Apply Zero Trust principles to secure software supply chains and CI/CD pipelines by managing dependencies, enforcing controls, and embedding developer-focused security practices.
fromAmazon Web Services
1 week ago

Amazon introduces two benchmark datasets for evaluating AI agents' ability on code migration | Amazon Web Services

Code migration is a repository-level transformation process that modernizes entire software projects to run on new platforms, frameworks, or runtime environments while preserving their original functionality and structure.
Software development
Software development
fromTechzine Global
1 week ago

AWS launches AI agents for cloud software migrations

AWS launched the Professional Services Delivery Agent to automate legacy software migration, generating proposals, code, and adjusting dependencies to dramatically shorten project timelines.
#python
Python
fromInfoWorld
4 months ago

Amp your Python superpowers with 'uv run'

Astral's uv tool streamlines Python environment setup and execution without permanent installations.
Python
fromRealpython
6 months ago

Episode #249: Going Beyond requirements.txt With pylock.toml and PEP 751 - The Real Python Podcast

PEP 751 introduces a new standardized file format for recording Python dependencies, emphasizing project reproducibility.
fromRealpython
6 months ago
Python

Episode #249: Going Beyond requirements.txt With pylock.toml and PEP 751 - The Real Python Podcast

fromGlyph
2 weeks ago

The "Dependency Cutout" Workflow Pattern, Part I

You're working on an application. Let's call it "FooApp". FooApp has a dependency on an open source library, let's call it "LibBar". You find a bug in LibBar that affects FooApp. To envisage the best possible version of this scenario, let's say you actively like LibBar, both technically and socially. You've contributed to it in the past. But this bug is causing production issues in FooApp today, and LibBar's release schedule is quarterly.
Software development
fromGrahamdumpleton
1 month ago

Detecting object wrappers - Graham Dumpleton

The best example of this and the reason that wrapt was created in the first place, is to instrument existing Python code to collect metrics about its performance when run in production. Since one cannot expect a customer for an application performance monitoring (APM) service to modify their code, as well as code of the third party dependencies they may use, transparently reaching in and monkey patching code at runtime is the best one can do.
Python
Python
fromInfoWorld
1 month ago

PDM: A smarter way to manage Python packages

PDM recomputes dependency graphs after changes; use pdm list or pdm list --graph, pdm install or pdm sync to install; PDM doesn't mark dev/optional packages.
fromInfoQ
2 months ago

Microsoft Extends Support Period for .NET Standard Term Support (STS) Releases from 18 to 24 Months

Microsoft announced an extension to its .NET Standard Term Support releases from 18 months to 24 months, as reported on the company's official development blog. The policy change, effective with .NET 9, will extend support for the latest release until November 10, 2026, matching the end-of-support date for .NET 8, a Long Term Support version. As stated by Microsoft, the company will maintain its established annual release schedule each November.
Software development
Python
fromInfoWorld
2 months ago

How to manage Python projects with Poetry

Poetry is an all-in-one Python project manager providing deterministic dependencies, virtual environment handling, and simplified building, packaging, and publishing to PyPI.
Python
fromRealpython
2 months ago

Python Project Management With uv - Real Python

uv is a Rust-written, high-speed, all-in-one Python package and project manager that handles dependencies, virtual environments, Python versions, builds, and publishing.
#nodejs
Python
fromInfoWorld
2 months ago

How to spin Python's challenges into AI gold

Standardize Python tools, workflows, and a 'golden path' to eliminate ecosystem friction and accelerate reliable AI and data project delivery.
Python
fromRealpython
2 months ago

uv vs pip: Managing Python Packages and Dependencies - Real Python

pip offers out-of-the-box availability and broad compatibility, while uv prioritizes faster installs, reproducible environments, and cleaner uninstalls for new-project workflows.
fromHackernoon
10 months ago

Building a Go Dependency Scanner From Scratch | HackerNoon

Managing Go projects requires tracking dependencies, checking for vulnerabilities, and ensuring license compliance. Building a custom analyzer using Go's standard library allows for tailored dependency management.
Software development
Python
fromPythoninsider
4 months ago

Python Insider: Python 3.14 release candidate 1 is go!

Python 3.14.0rc1 is the first release candidate with no ABI changes, final release on October 7, 2025.
Scala
fromHackernoon
6 months ago

Say Hello to Rust 1.84.0 | HackerNoon

Rust 1.84.0 improves dependency management by introducing MSRV-aware resolver for Cargo.
fromPycoders
6 months ago

PyCoder's Weekly | Issue #682

NumPy quickly becomes complex as dimensions increase; while two dimensions may appear straightforward, adding more can lead to significant challenges in managing data effectively.
Python
Artificial intelligence
fromHackernoon
3 years ago

Code Smell 300 - Package Hallucination | HackerNoon

Avoid hallucinated packages that compromise security and stability.
Implement robust validation to counter risks of AI-generated dependencies.
DevOps
fromInfoQ
6 months ago

Best Practices for Managing Shared Libraries in .NET Applications at Scale

Shared libraries improve efficiency but may create scalability bottlenecks if poorly managed.
Centralized package management tools streamline version control across projects.
Git submodules combined with CPM facilitate control but require disciplined developer practices.
CI/CD pipelines with robust testing are vital for managing updates safely.
Software development
fromInfoQ
7 months ago

Google Go Module Mirror Served Backdoor for 3+ Years

Research uncovered a major supply chain attack in the Go ecosystem involving a backdoored package.
The attack exploited caching in the Go Module Proxy, emphasizing security vulnerabilities in module management.
[ Load more ]