3 ms·
Feels like this is a business opportunity for someone. Use case: 1. Upload a pre-reviewed package.json file. 2. The service monitors changes, and recommends u
by wiremine 5y ago
Feels like this is a business opportunity for someone.
Use case:
1. Upload a pre-reviewed package.json file.
2. The service monitors changes, and recommends updates. Recommendations might include security, bug, features, etc. It would check downstream dependencies, too. For production systems, the team might only care about security features.
3. Developer team can review recommendations, and download the new package.json.
(There are lots of opportunities to improve this: direct integration with git, etc.)
Anybody know if this sort of service exists? I know npm has _some_ of this. Maybe I'm just ignorant of how much of a solved problem this is?
- rank0 5y agoWhat you’re looking for is called SCA (software composition analysis). Best tool I’ve used so far in this domain is snyk.
- goodpoint 5y ago> Feels like this is a business opportunity for someone. This is what some Linux distributions do. Quality review, legal review, security backports.
- cilefen 5y agoWe use Renovate for this.