Dependencies! We need them, but how do we use them effectively and safely? In this week’s episode Kris is joined by Ian and Johnny to discuss the polyfill.io supply chain attack, the history of dependency management and usage in Go, and the Go Proverb that “a little copying is better than a little dependency”. Of course, we wrap up the episode with some Unpopular Opinions!

<a href="https://changelog.com/gotime/321/discuss">Leave us a comment</a>

<a href="https://changelog.com/++" rel="payment">Changelog++</a> members save 5 minutes on this episode because they made the ads disappear. Join today!

Sponsors:
<ul>
 <li><a href="https://speakeasyapi.dev/">Speakeasy</a> – Production-ready, Enterprise-resilient, best-in-class SDKs crafted in minutes. Speakeasy takes care of the entire SDK workflow to save you significant time, delivering SDKs to your customers in minutes with just a few clicks! <a href="https://speakeasyapi.dev/">Create your first SDK for free!</a>
</li>
</ul>


Featuring:
<ul><li>Kris Brandow &ndash; <a href="https://twitter.com/skriptble" rel="external ugc">Twitter</a>, <a href="https://github.com/skriptble" rel="external ugc">GitHub</a></li><li>Johnny Boursiquot &ndash; <a href="https://twitter.com/jboursiquot" rel="external ugc">Twitter</a>, <a href="https://github.com/jboursiquot" rel="external ugc">GitHub</a>, <a href="https://www.jboursiquot.com/" rel="external ugc">Website</a></li><li>Ian Lopshire &ndash; <a href="https://twitter.com/ianlopshire" rel="external ugc">Twitter</a>, <a href="https://github.com/ianlopshire" rel="external ugc">GitHub</a></li></ul>

Show Notes:
<ul>
<li><a href="https://www.sonatype.com/blog/polyfill.io-supply-chain-attack-hits-100000-websites-all-you-need-to-know">Polyfill.io supply chain attack hits 100,000+ websites — all you need to know</a></li>
<li><a href="https://go.dev/blog/supply-chain">How Go Mitigates Supply Chain Attacks</a></li>
<li><a href="https://go-proverbs.github.io">Go Proverbs</a></li>
<li><a href="https://www.youtube.com/watch?v=PAAkCSZUG1c&t=9m28s">A little copying is better than a little dependency</a></li>
</ul>

Something missing or broken? <a href="https://github.com/thechangelog/show-notes/blob/master/gotime/go-time-321.md">PRs welcome!</a>

Podurama

Home

Trending

Personal

Your Podcasts

New Episodes

My Files

Favourite Episodes

Tags (Folders)

Recently Played

Bookmarks

Followed Playlists

Dependencies are dangerous (Go Time #321)

Changelog Master Feed

AI Chapters

AI Insights

Reviews