Skip to content
All tags

#dependencies

2 posts
tech deep-dive Technology Choices in the AI Era

Renovate: Turning Dependency Updates into a Governed Continuous Process

Renovate is more than an update-PR bot: packageRules, grouping, schedules, minimum release age, and automerge policy determine update speed, review noise, and supply-chain exposure.

#renovate#dependencies#automation#supply-chain#devops
tech deep-dive Technology Choices in the AI Era

Socket.dev: Blocking Malicious Package Behavior at Dependency-Diff Time

Socket.dev goes beyond CVEs by analyzing install scripts, obfuscation, network and shell access, and ownership changes when packages enter a dependency diff.

#socket-dev#supply-chain#dependencies#security#npm