Travis J. Gosselin Distinguished Engineer, Architect & Speaker

• Posted by:
• travis
• No Comments

Discovering Dependabot many years ago was one of those moments of incredible excitement. It was not the same kind of excitement as when you finished creating and publishing that new feature to production, or even the same as when you...

• Posted by:
• travis
• No Comments

Dependabot native has been around for a couple years now after GitHub officially acquired it in 2019. But if I google "Dependabot" I still generally find myself at the "Dependabot.com" home-page, and up until last week found myself still using...

• Posted by:
• travis
• 4 Comments

Problem No matter what language or package manager, dependency management in most projects suffer from many of the same problems: Evaluating incoming security risks associated with packages in your project never really happens.Latest dependencies are added when a project starts,...