WEBVTT

00:00:00.000 --> 00:00:06.000
Does every line of website code come from the same developer?

00:00:06.000 --> 00:00:13.000
Projects often rely on reusable packages maintained by other people.

00:00:13.000 --> 00:00:18.000
Understand the code the project relies on.
6 dependency checks.

00:00:18.000 --> 00:00:30.000
A dependency supplies other code
A project can use a package to provide a needed feature.
Reusable package · Required feature · Project dependency

00:00:30.000 --> 00:00:42.000
The package has an identity
Its name and version identify the intended component.
Package name · Package version · Project declaration

00:00:42.000 --> 00:00:54.000
Dependencies can have their own
One package may rely on additional packages in turn.
Direct dependency · Further dependencies · Dependency tree

00:00:54.000 --> 00:01:06.000
Development tools count too
Build tools and testing tools can be dependencies of the project.
Build tooling · Testing tooling · Runtime code

00:01:06.000 --> 00:01:18.000
Updates need review
Check maintenance, compatibility and relevant security information.
Maintainer guidance · Release notes · Compatibility checks

00:01:18.000 --> 00:01:30.000
Keep a reproducible project
Retain the dependency declarations and relevant lockfile for handover.
Project declaration · Relevant lockfile · Setup instructions

00:01:30.000 --> 00:01:39.000
Your checklist
A dependency supplies other code · The package has an identity · Dependencies can have their own · Development tools count too · Updates need review · Keep a reproducible project

00:01:39.000 --> 00:01:47.000
Know what the project uses and how it is maintained.
jerseyweb.je