Beyond dependency trees
The numbers look convincing until you read the footnotes.
There is a version of dependency trees that works well. It is not the cheapest one, and it is rarely the one in the demo.
Subscriber story
Continue reading with a subscription
This piece is part of the subscriber archive. Subscribe to the daily brief for full access — one email, no card, cancel any time.
Already a subscriber?
#tooling#reliability#testing
More in this section
software
The quiet return of single-file binaries
Static linking is fashionable again. The reasons are less about performance and more about deployment fatigue.
🔒softwareSubscriber
A minimal CI pipeline in 200 lines
No plugins, no marketplace, no YAML sprawl. Just a runner, a queue, and honest logging.
🔒softwareSubscriber
Editorial: your dependency tree is a supply chain
Treat it like one — pin, audit, mirror, and stop trusting transitive installs by default.