3 ms·
On dependencies: There aren't a lot of tools out there to keep you 100% up to date and to keep moving. There is maven-dependencies that can auto upgrade, howe
by monksy 8y ago
On dependencies:
There aren't a lot of tools out there to keep you 100% up to date and to keep moving.
There is maven-dependencies that can auto upgrade, however, that's just a simple version upgrade and may have issues with non-standard versioning. Also it doesn't help with transitive dependency conflicts.
We need good tools to alert and stop transitive dependency conflicts in their tracks. Versions helps with this, but it doesn't tell you much.
What we do need: Jenkins dependency triggers for the projects. We need something that will automatically work wtih SCM and CI to create commits based on new found dependencies. If there is something that changed your tests should confirm if it works or not.
- riyakhanna1983 8y agoWhat about existing tools, such as Synk, OSSIndex?
- monksy 8y agoThat's good for reporting. There should be an automated approach to keep projects up to date.