1
Always Review Your Dependencies, AGPL Edition
Before adding a dependency to one of my software projects, I do some basic vetting of the dependency. Among the things I check are:
Andrew Ayer
I'm a software engineer who works on security, usability, networking, and cryptography. I'm the bootstrapped founder of SSLMate , which makes it easy to obtain and monitor SSL certificates, and DNS Helper , which helps your customers add DNS records so you don't have to.
- Popular posts
- 12
- Total points
- 3,222
- HN comments
- 1,555
- Rank
- #437 personal
Visit agwa.name → RSS feedOn Hacker News Jul 2014 – Apr 2026
Security & Privacy 5Networking & Internet 4Systems & Performance 3Web & Frontend 2Software Engineering 2Open Source 2
2
Independently verifying Go's reproducible builds
Introducing Source Spotter, a Go Checksum Database auditor and Go toolchain reproducer