3 ms·
I'm working with a pre-launch company that's building a tool to map companies' stacks (among other things). They've shared some of their research with me from a
by ariehkovler 8y ago
I'm working with a pre-launch company that's building a tool to map companies' stacks (among other things). They've shared some of their research with me from and it's insane.
Large software companies have no idea what dependencies, libraries, or even languages are in their stacks. Companies are using multiple versions of the same library, replicated in a bunch of different repos. Different teams in he same company end up re-implementing solutions over and over, sometimes in a whole other framework than the team next to them because nobody knows what anyone else is using. Makes compliance a nightmare.
It's wild out there.
- justicz 8y agoIt’s even more wild when you consider that these companies are relying on all of these dependencies to be secure, and to lack intentional backdoors.