The rise of agile development processes and the DevOps movement has only accelerated innovation, and pushed even more toward the use of open source and other components. The tooling with package managers and build tools such as Maven, Gradle, npm, Nuget, gems, and others has promoted the use of components as a standard practice. This allows developers to take advantage of the features these frameworks and libraries offer. Today, 90% of a typical application is composed of open source components. However, using these components brings ownership and responsibility with them.
A modern software development organization must be able to create an inventory of all the components used in their software, know about the suppliers, and keep track of everything. There are a number of problems that currently exist and are in need of a solution to keep up with the accelerating demands in today’s fast and agile processes.
We will discuss how you can face this onslaught of more work for development teams in order to identify, track, and replace components with known vulnerabilities, yet at the same time continue to accelerate releases and get more features and new products to market quickly. Heavily data-driven tools are emerging to allow you to:
We will demo some of these applications and discuss the data they expose to you and the automation you can achieve.
Manfred Moser has an engineering background. He is a professional trainer for Apache Maven and Sonatype Nexus, author of books such as The Hudson Book, Repository Management with Nexus, and the Sonatype CLM documentation. As community advocate at Sonatype, he helps developers with their component usage on a daily basis. He is the project lead for the Android Maven Plugin and is involved in a number of other open source projects, as well as local user groups. With this background he has been presenting at conferences such as AnDevCon, OSCON, JavaOne, and user group meetings around the world for a number of years. Manfred lives in Victoria, BC with his wife and sons. You can follow him on twitter or G+ and check out his website for more information.
Comments on this page are now closed.
©2015, O'Reilly Media, Inc. • (800) 889-8969 or (707) 827-7019 • Monday-Friday 7:30am-5pm PT • All trademarks and registered trademarks appearing on oreilly.com are the property of their respective owners. • firstname.lastname@example.org