Tag

Dependencies

3 Thoughts filed under this subject.

  1. A Lockfile Gives Repeatability, Not Provenance
  2. Supply-Chain Security Begins with Who Can Change the Artifact
  1. Dependency Inversion Lets Policy Own the Boundary