Notes tagged “dependencies”

2026

1. July 2026 Can I Use This Library?

   A strict CSP quietly turns every dependency into a security decision. Here is the tree I walk to make it — per library, and across a whole app.

   security csp web architecture dependencies dissecting-systems

2. June 2026 You Don't Want Separate Repos

   A repository is a database; splitting a subproject out trades a content hash for a version string — and there's only one case where that trade is actually forced.

   monorepo versioning git pnpm npm package-managers dependencies content-addressing modularity security supply-chain genkit sdk-design dissecting-systems