Class Central is learner-supported. When you buy through links on our site, we may earn an affiliate commission.

Linux Foundation

Builds Today, Breaks Tomorrow: The Mystery of the Disappearing NPM Dependency

Linux Foundation via YouTube

Overview

Save Big on Coursera Plus. 7,000+ courses at $160 off. Limited Time Only!
Explore a real-world case study of a mysteriously disappearing NPM dependency in this 23-minute conference talk. Trace the investigation from an internal repository issue to an unexpected change in a popular open-source library. Learn valuable best practices for development teams and open-source maintainers to ensure stable, successful, and policy-compliant JavaScript build pipelines. Discover the importance of lock files, proper NPM versioning, and using 'npm ci' in builds. Gain insights into package maintenance best practices and understand how seemingly unrelated changes can impact your project's dependency tree. Equip yourself with knowledge to prevent similar scenarios and maintain robust JavaScript development workflows.

Syllabus

Hi! I'm Bella Wiseman
How Goldman Sachs Uses GatsbyJS
Open Source Licenses
Dependency Tree
What Changed? Nothing!
NPM Versioning
Mystery solved!
Don't be taken by surprise
Lock files!
Use npm ci in your builds
A Comparison
Fix the underlying issue
Package Maintenance Best Practices
About Goldman Sachs Engineering
Questions?

Taught by

Linux Foundation

Reviews

Start your review of Builds Today, Breaks Tomorrow: The Mystery of the Disappearing NPM Dependency

Never Stop Learning.

Get personalized course recommendations, track subjects and courses with reminders, and more.

Someone learning on their laptop while sitting on the floor.