Dependency CI automatically analyses your dependencies after every commit, it checks the status, licenses and security of every library you depend upon as soon as you push to GitHub.
Welcome to The Manifest, a podcast all about package management. Your hosts are Alex Pounds and Andrew Nesbitt. Together they explore the technical details of package management, the stories and the history of various projects, and the communities around them too. Every two weeks there will be a brand new interview with a package manager maintainer
The Tidelift Subscription is a first step toward making open source work better for everyone. Where professional software development teams can be confident that the open source code they rely on is reliable. And open source maintainers and core teams can build sustainable businesses around their projects.