4 ms·

Was it purposeful to make this comment also highly abstract? Not meaning this as snark just found it a funny juxtaposition.

• heavenlyblue 4y ago
  Yeah, I kind of understand what that comment is saying but also feel like it can be interpreted in so many different actual ways that it's practically useless.
  • willis936 4y ago
    It's a good CYA legal insurance policy.
  • deleted 4y ago
    [deleted]
• webo 4y ago
  One simple example was that I couldn’t install dependencies from public registries such npmjs (npm) or pypi (pip). It took an approval process for an internal team to review and clone packages onto Google’s internal registry. On the other hand, things like deployment and monitoring were so trivial and magic. This was circa 2015.
  • ahoka 4y ago
    That's kind of standard at big companies. Even at a small scale, it is beneficial to mirror every external dependency.
    • shric 4y ago
      The review part is the pain point far rather than the mirroring.
      • johannes1234321 4y ago
        It is a pain point, but relevant for legal liability and tracking security concerns, else you quickly have wild west where it's unclear what kind of problems affect which team and how
  • wnoise 4y ago
    Given supply chain attacks, that seems not only reasonable, but essential.