#FOSSBack: Radoslava Zheleva & Velichka Atanasova – Dependency Management: Risk vs Crisis Management
Channel: Plain Schwarz
Date: 2023-03-21

More: https://program.foss-backstage.de/fossback23/talk/P7L87M/

The dependency graphs of modern applications greatly demonstrate how we build software today – we focus on our unique innovation and deal with common challenges by leveraging existing solutions. Though that’s a fine software development approach, each third-party component we use drags along dependencies that drag along their dependencies, and we end up with tons of known and unknown dependencies which could get us into legal and security trouble.

To identify and mitigate risks, we need increased knowledge of all software assets, choosing dependency wisely, tacking changes, and timely updating them.

In this talk we are going to explore the legal and security dependency management challenges and argue that risk management planning is better than crisis management.

###

Follow us on Social Media and join the Community!
Twitter: https://twitter.com/fossbckstg
Mastodon: https://floss.social/@fossbackstage
LinkedIn: https://www.linkedin.com/showcase/68797995/

Website: https://foss-backstage.de
Mail: info@foss-backstage.de


FOSS Backstage is an event by Plain Schwarz – https://plainschwarz.com