The Axios supply chain attack reminded me of a dependency audit I ran at a client last year. What I found was worse than any vulnerability scanner could flag.
- Published On
Hello, I'm Luke
Personal blog about my experiences and thoughts on software development.
Latest Posts
- We built a canary deployment pipeline with automated rollbacks. It still let a bad release through to 100% of users. Here's what went wrong.
- Published On
- AI code review tools are everywhere now. After rolling one out on a real project, I learned more about our team than about the tool itself.
- Published On
- How a 45-minute end-to-end test suite trained an entire team to ignore test failures — and what we did about it.
- Published On
- How 340 feature flags turned a codebase into a minefield — and the boring process that dug us out.
- Published On