This #hack of #npm is a disaster.

If you aren't well-versed enough with NPM and finding #dependencies, this video will give you a mini-deep-dive and help you gauge your risk and do some triage... Watch for the terminal commands.

youtu.be/eGSsoSEppNU

The Three Pillars of JavaScript Bloat A brief look at the three main causes of bloat in our JavaScript dependency trees, and how we can start to address them.

The Three Pillars of JavaScript Bloat, by @43081j.com:

43081j.com/2026/03/three-pillars-of...

#javascript #dependencies #complexity #runtimes #architecture

MultiSearch Tag Explorer MultiSearch Tag Explorer - Explore tags and search results by aéPiot - aéPiot: Independent SEMANTIC Web 4.0 Infrastructure (Est. 2009). High-density Functional Semantic Connectivity with 100/100 Trust...

#BAIRAAG
aepiot.com/advanced-sea...
#PROSTITUTION IN #THE #CROWN #DEPENDENCIES
aepiot.com/advanced-sea...
#TOM #TURK #AND #DAFFY
multi-search-tag-explorer.aepiot.com/advanced-sea...
headlines-world.com

MultiSearch Tag Explorer MultiSearch Tag Explorer - Explore tags and search results by aéPiot - aéPiot: Independent SEMANTIC Web 4.0 Infrastructure (Est. 2009). High-density Functional Semantic Connectivity with 100/100 Trust...

#RUSSIAN #RHAPSODY #FILM
aepiot.ro/advanced-sea...
#CROWN #DEPENDENCIES
advanced-search.aepiot.ro/advanced-sea...
#IRURA
semantic-search.aepiot.ro/advanced-sea...
headlines-world.com

Package Managers Need to Cool Down A survey of dependency cooldown support across package managers and update tools.

#Development #Overviews
Package managers need to cool down · The state of dependency update delay mechanisms ilo.im/16bnm5 by Andrew Nesbitt

_____
#Attacks #SupplyChain #PackageManagers #Dependencies #Npm #Vulnerability #Security #WebDev #Frontend #Backend

¿
To uninstall these components
correctly on Windows 11,
follow sequence below.
in order ensure that
#dependencies are removed
before core language,
preventing #orphaned-files
that can cause conflicts later

7 lessons engineers learn only after breaking production Last April, I wrote a well-received article about the 13 software engineering laws - Hyrum’s, Conway’s, Zawinski’s, and 10 famous others.

#Development #Pitfalls
Lessons learned after breaking production · What software engineers never want to experience again ilo.im/16bkbg by Anton Zaides

_____
#Engineering #Troubleshooting #Debugging #Rollbacks #Backups #Dependencies #QuickFixes #WebDev #Frontend #Backend

¿
#Dependencies
Ensure you also link
torch-<version>.dist-info folder
if your virtual environment's
package manager (like pip)
needs to "see" that
package is installed for dependency resolution

Supply-chain attack using invisible code hits GitHub and other repositories Unicode that's invisible to the human eye was largely abandoned—until attackers took notice.

Supply-Chain Attack Using Invisible Code Hits GitHub and Other Repositories, by @dangoodin.bsky.social (@arstechnica@mastodon.social):

arstechnica.com/security/2026/03/supply-...

#security #github #dependencies

Depx | Dependency analysis Analyse your npm dependencies before you install. See direct and transitive dependency counts, lines of code, release dates, and popularity scores.

Tool: Dependencies Badge Generator, by (not on Mastodon or Bluesky):

https://depx.co/badge

#tools #exploration #images #dependencies #npm

External import maps, today! • Lea Verou A few weeks ago, I posted lamenting the current state of web dependencies. Turns out that external import maps — the lack of which I had identified as a core limitation — can be emulated today!

#Development #Techniques
External import maps, today! · Using DOM methods to inject an import map ilo.im/16b2f1 by Lea Verou

_____
#Dependencies #JavaScript #NodeModules #ImportMaps #Browsers #WebPlatform #WebDev #Frontend #DOM #JavaScript

yapping None

Guess what!

Yapping v1.1.0 is live!

pypi.org/project/yapp...
github.com/mrswats/yapp...

#Python #Dependencies

Wait a minute...🤔

If you don't have to download dependencies on CI all the time, then you can reduce setup wait times by 50% or more!

🐇 #Develocity Universal Cache is here 🐇

https://gradle.com/develocity/product/universal-cache/

#CI #Dependencies #Setup #Cache #ColdStart

Not seeing a lot of democracies benefitting from US malfeasance
Canada is doing well, ONLY because we are being forced into tightening #economic & #political #alliances -aka #dependencies- with #less-democratic nations

Rely On AI And Get Left Behind LLM-based code generation comes with multiple potential gotchas for a business. More code hitting process bottlenecks like testing, review and integration makes most teams slower. More problems bei…

#Development #Pitfalls
Rely on AI and get left behind · Who will fix code no one understands anymore? ilo.im/16atf5 by Jason Gorman

_____
#Business #Engineering #Programming #Coding #AI #Dependencies #CognitiveDebt #WebDev #Frontend #Backend

Excited for #JCON EUROPE 2026? See Kevin Dubois at #JCON2026 in Cologne talking about 'Local #Development in the #AI Era'

Most of us like to do local #development. It means we’re in #control of any #dependencies, network issues/latency …

🎟️ 2026.europe.jcon.one/tickets
Free for #JUG members

Package managers are everywhere, with seemingly every language and operating system implementing their own solution. The lack of interoperability between these systems means that multi-lingual projects are unable to express precise dependencies across language ecosystems, and external system and hardware dependencies are typically implicit and unversioned. We define HyperRes, a formal system for describing versioned dependency resolution using a hypergraph that is expressive enough to model many ecosystems and solve dependency constraints across them. We define translations from dozens of existing package managers to HyperRes and comprehensively demonstrate that dependency resolution can work across ecosystems that are currently distinct. This does not require users to shift their choice of package managers; instead, HyperRes allows for the translation of packaging metadata between ecosystems, and for solving to be precisely specialised to a particular deployment environment.

This seems very interesting, and would make an interesting talk!

Solving Package Management via Hypergraph Dependency
Resolution - arxiv.org/pdf/2506.10803

#dependencies #packagemanagement #research

The many layers of dependencies in design systems Every design system is built on something. For better and for worse.

#Development #Guidelines
Dependency layers in design systems · “Be intentional about what you own.” ilo.im/16a01d by PJ Onori

_____
#Dependencies #Decisions #Community #Expertise #Codebase #Frameworks #DesignSystems #Development #WebDev #Frontend

Original post on sonatype.com

Secure, Reliable Terraform At Scale With Sonatype Nexus Repository Terraform has become the de facto standard for infrastructure as code (IaC). From cloud-native startups to global enterprises, tea...

#repository #dependencies #Nexus #Repository #Terraform […]

[Original post on sonatype.com]

Secure, Reliable Terraform At Scale With Sonatype Nexus Repository Terraform has become the de facto standard for infrastructure as code (IaC). From cloud-native startups to global enterprises, tea...

#Security #Bloggers #Network #dependencies […]

[Original post on securityboulevard.com]

Introduction · Node.js package configuration guide

Node.js Package Configuration Guide, by @nodejs@social.lfx.dev:

https://nodejs.github.io/package-examples/

#guides #packages #dependencies #configuration #commonjs

The Nine Levels of JavaScript Dependency Hell Come, I will show you what I have seen.

#Development #Pitfalls
The 9 levels of JS dependency hell · Developers solved each problem, only to create the next ilo.im/169mic by Andrew Nesbitt

_____
#Programming #Coding #Dependencies #JavaScript #Packages #Attacks #AI #WebDev #Frontend #Backend

The Nine Levels of JavaScript Dependency Hell Come, I will show you what I have seen.

The Nine Levels of JavaScript Dependency Hell, by @andrewnez@mastodon.social:

nesbitt.io/2026/01/05/the-nine-leve...

#javascript #dependencies #maintainability

npm to Implement Staged Publishing After Turbulent Shift Off Classic Tokens

npm to Implement Staged Publishing After Turbulent Shift Off Classic Tokens, by @sarahgooding@fosstodon.org (@socketsecurity@fosstodon.org):

socket.dev/blog/npm-to-implement-st...

#npm #dependencies #security #github

Web dependencies are broken. Can we fix them? • Lea Verou Dear JS ecosystem, I love you, but you have a dependency management problem when it comes to the Web, and the time has come for an intervention.

Web Dependencies Are Broken—Can We Fix Them?, by @leaverou@front-end.social:

https://lea.verou.me/blog/2026/web-deps/

#dependencies #javascript #importmaps #webplatform

Web dependencies are broken. Can we fix them? • Lea Verou Dear JS ecosystem, I love you, but you have a dependency management problem when it comes to the Web, and the time has come for an intervention.

#Development #Proposals
Web dependencies are broken · “The time has come for an intervention.” ilo.im/169obu by Lea Verou

_____
#Dependencies #JavaScript #Bundlers #NodeModules #ImportMaps #CDNs #Browsers #WebPlatform #WebDev #Frontend

The Package Management Landscape A directory of tools, systems, and services that relate to package management.

The Package Management Landscape, by @andrewnez@mastodon.social:

nesbitt.io/2026/01/03/the-package-m...

#dependencies #tooling #overviews #linklists

That's Some Other Dev's Problem

That's Some Other Dev's Problem

#Juniorvssenior #npm #dependencies #Technicaldebt #Developerexperience

programmerhumor.io/javascript-memes/thats-s...