2 ms·
This is all a pitch to run Emerge tools in the CI/CD process. So from Santander’s side: Introduce a third party dependency * that has to go through the appro
by philipwhiuk 2y ago
This is all a pitch to run Emerge tools in the CI/CD process.
So from Santander’s side:
Introduce a third party dependency
* that has to go through the appropriate auditing
* that adds a supply chain attack vector
* that likely slows down internal development by adding an extra step to the build process (no you can’t just do it on release builds that would be crazy)
* with an added cost
All for something most likely no customer (or statistically no customer) ever complains about.
- stefan_ 2y agoYes, the thing that people who ship 600 MiB apps have in common is an extreme attention to detail in their "software supply chain".
- philipwhiuk 2y agoYes, that is the sort of thing you have to care about in banking.
- usr1106 2y ago> This is all a pitch to run Emerge tools in the CI/CD process. True. But still very educational about the current state of computing.
- msephton 2y agoBut they can fix the issues that are bloating the app without those tools now that they know about them. Plus, it would be possible to figure most of this out just by looking casually at the size and structure of the IPA they're uploading for distribution.
- philipwhiuk 2y ago> Plus, it would be possible to figure most of this out just by looking casually at the size and structure of the IPA they're uploading for distribution. Which they'd probably do if a statistically significant number of people cared.