Managing PHP Dependency Stability with Caret and Tilde Constraints
Learn how to use caret (^) and tilde (~) operators in Composer to manage PHP dependencies, balancing the need for security updates with application stability.
Loading…
ReadMeFeed / Community knowledge
#dependency-management
Real questions. Useful conversations. Find the people who know your stack.
composerChoosing Between FetchContent and ExternalProject for CMake Dependencies
Learn when to use FetchContent versus ExternalProject in CMake to manage dependencies. Compare configuration-time and build-time dependency management with implementation examples.
cppPoetry Lockfiles: The Secret to Reproducible Python Builds
Poetry’s lockfile guarantees reproducible builds by capturing the exact dependency graph. This blog walks through how it works, shows a concrete example, discusses trade‑offs, and gives a checklist for teams to adopt deterministic dependency resolution.
python
poetryManaging Local Package Dependencies with Yarn Workspaces
Learn how to implement Yarn Workspaces to manage multiple packages in a single repository, optimize dependency hoisting, and link local packages without manual publishing.
yarnUsing Bower Overrides to Pin Transitive Dependency Versions
Learn how to use Bower’s overrides object to lock transitive dependencies to a specific version, with a concrete example, verification steps, and a discussion of trade‑offs.
bowerLock PHP Versions Across Environments with Composer’s config.platform
When your team’s PHP versions drift, dependency resolution can break. Composer’s `config.platform` lets you emulate a specific PHP runtime during installs, ensuring the same lockfile everywhere. Learn how to set it up, what it does, and its trade‑offs.
Choosing Between Poetry Dependency Groups, Extras, and Markers for Environment-Specific Dependencies
Decide where each non-core dependency lives in a Poetry project: groups for internal tooling, extras for user-facing optional features, markers for platform conditions — with a concrete pyproject.toml layout, install commands per environment, and validation steps.
Choosing between nest update CLI and manual package.json edits for deterministic rollback after a failed NestJS major upgrade
The goal is to guarantee a reversible upgrade path when a NestJS major release alters decorator signatures or DI configuration, allowing teams to restore the pre‑upgrade state without losing uncommitted work. The nest update CLI speeds up dependency resolution to the latest compatible versions but provides no built‑in mechanism to revert transitive changes,
nestjsUse npm ci for Clean, Reproducible Dependency Installs
Use npm ci for clean, reproducible dependency installs. Learn prerequisites, exact steps, verification, and recovery when the lockfile is out of sync.