Your Dependency Graph Is a Liability You Haven’t Priced Yet (opens in new tab)

You have never sat down and calculated the cost of your dependencies. Not really. I am guilty of this too. I have spent years treating `go.sum` and `package-lock.json` as infrastructure the kind of thing you commit and forget until something breaks loudly enough to wake you up. The problem is that the breakage is getting […]