I love a good debate on how to pick dependencies. I’m bummed we haven’t automated this away yet (open rankings for every package/tool out there) but to be fair there’s very little literature on it either.
One of my favorite fallacies (that Daniel notes here) is that software frequency isn’t all-important. If the last release was 2 years ago but the team releases every 2 years for the last 10 years, you can be very sure that this is still maintained. You have to look at release consistency in addition to frequency.
I love a good debate on how to pick dependencies. I’m bummed we haven’t automated this away yet (open rankings for every package/tool out there) but to be fair there’s very little literature on it either.
One of my favorite fallacies (that Daniel notes here) is that software frequency isn’t all-important. If the last release was 2 years ago but the team releases every 2 years for the last 10 years, you can be very sure that this is still maintained. You have to look at release consistency in addition to frequency.