Software Engineering Radio - the podcast for professional software developers cover image

Software Engineering Radio - the podcast for professional software developers

SE Radio 587: M. Scott Ford on Managing Dependency Freshness

Oct 25, 2023
54:53
Snipd AI
M. Scott Ford, CTO of Corgibytes and host of the Legacy Code Rocks podcast, discusses managing dependency freshness, measuring it, gaining insights from monitoring it over time, and mitigating risks of working with outdated dependencies. He also explores challenges with dependency upgrades, introduces a tool called Dependable, and discusses approaches to testing different types of dependencies in software development. Additionally, he explains the concept of 'freshly' and its relation to dependency freshness metrics, discusses managing dependencies in multiple programming languages with Freshly, and analyzes the architecture of the central CLI and S-bombs for analysis and due diligence.
Read more

Podcast summary created with Snipd AI

Quick takeaways

  • Dependency freshness is crucial in software development for ensuring up-to-date code and mitigating risks.
  • Challenges in managing dependency freshness include fear of breaking code, lack of awareness, and limited visibility into risks.

Deep dives

Dependency freshness and its importance

Dependency freshness, referring to code that is pulled into an application from external sources, plays a crucial role in software development. The speaker highlights the significance of managing and maintaining up-to-date dependencies, which are often obtained through package managers. The freshness of dependencies is measured using metrics such as version numbers or release dates. One such metric discussed is the Libya metric, which calculates the temporal distance between the version being used and the latest version. The speaker acknowledges that freshness alone does not guarantee the quality of a dependency and suggests investigating factors like community support and security updates. Outdated dependencies can lead to risks such as compromised security and decreased productivity, and can even result in staff turnover. The speaker emphasizes the need for organizations to prioritize dependency freshness and regularly upgrade their dependencies to mitigate these risks.

Get the Snipd
podcast app

Unlock the knowledge in podcasts with the podcast player of the future.
App store bannerPlay store banner

AI-powered
podcast player

Listen to all your favourite podcasts with AI-powered features

Discover
highlights

Listen to the best highlights from the podcasts you love and dive into the full episode

Save any
moment

Hear something you like? Tap your headphones to save it with AI-generated key takeaways

Share
& Export

Send highlights to Twitter, WhatsApp or export them to Notion, Readwise & more

AI-powered
podcast player

Listen to all your favourite podcasts with AI-powered features

Discover
highlights

Listen to the best highlights from the podcasts you love and dive into the full episode