Zen

Source string Source string

146/10000 · 146

The string is read only.

English Actions
Description
A *dependency identification* program looks for the dependencies actually used within the codebase. As a result, the organisation must establish and maintain a list of known dependencies for its code base and watch the evolution of the identified providers.
Establishing and maintaining a list of known dependencies is an enabler for, and a prerequisite to:
IP and licence checking: some licences cannot be mixed, even as a dependency. One has to know its dependencies to assess its associated legal risks.
Vulnerabilities management: the entire piece of software is as weak as its weakest part: see the example of the [Heartbleed flaw](https://en.wikipedia.org/wiki/Heartbleed). One has to know its dependencies to assess its associated security risks.
Lifecycle and sustainability: an active community on the dependency project is a bright sign for bug corrections, optimisations, and new features.
Thoughtful selection of used dependencies, according to "maturity" criteria - the goal being to use open source components that are safe, with a sane and well-maintained codebase, and a living, active and reactive community that will accept external contributions, etc.
Opportunity Assessment
Identifying and tracking dependencies is a required step to mitigate the risks associated with any code reuse. In addition, implementing tools and processes to manage software dependencies is a prerequisite to properly manage quality, compliance, and security.
Consider the following questions:
What is the company's risk (cost, reputation, etc.) if the software is corrupted, attacked or sued?

Loading…

User avatar None

String updated in the repository

  1. ospo-zone-ggi
  2. 52_activity_23
  3. English
Lifecycle and sustainability: an active community on the dependency project is a bright sign for bug corrections, optimisations, and new features.
Lifecycle and sustainability: an active community on the dependency project is a bright sign for bug corrections, optimisations, and new features.
a year ago
Browse all string changes

Things to check

Multiple failing checks

Following checks are failing:
Mismatched semicolon: French, French

Reset

Glossary

English English
No related strings found in the glossary.

String information

Source string description
Enabler and prerequisite by known dependencies
Flags
md-text, read-only
Source string location
../content/52_activity_23.md:block • 6 • (unordered • list)
String age
a year ago
Last updated
a year ago
Source string age
a year ago
Translation file
handbook/resources/pot_files/content/52_activity_23.pot, string 8