Keeping dependencies secure: semver, automation and their limits
Most of an application's code comes from dependencies. How semver and automated updates keep it secure, and what to do when an update can't.
Security
Security problems rarely start with something dramatic. Hardening, dependencies, access and email authentication, kept under control every day.