3 ms·
I've heard of software pipelines and software dependency but this is the first I've ever heard of software supply chain. I don't think the metaphor is apt. Dep
by yardie 4y ago
I've heard of software pipelines and software dependency but this is the first I've ever heard of software supply chain.
I don't think the metaphor is apt. Dependencies are fungible you can branch, tag, freeze, lock, etc whatever your requirements are and continue trucking along. Physical Supply chains are not that at all. In some cases you literally cannot go back to the previous revision ever again.
- jacques_chester 4y agoPhysical supply chains are full of fungible products such as wheat, pork bellies or gold. Such products are what the word "fungible" was first used to describe.
- Tangurena2 4y agoAfter the Log4J vulnerability, people started using the term "software supply chain". I think this comic demonstrates the "problem": https://xkcd.com/2347/ https://xkcd.com/2347/