Intelligent Dependency Resolution For Optimal Compatibility And Security With Project Thoth

Intelligent Dependency Resolution For Optimal Compatibility And Security With Project Thoth

Published on Jun 15
31分钟
The Python Podcast.__init__
0:00
0:00
<div class="wp-block-jetpack-markdown"><h2>Summary</h2> <p>Building any software project is going to require relying on dependencies that you and your team didn&#8217;t write or maintain, and many of those will have dependencies of their own. This has led to a wide variety of potential and actual issues ranging from developer ergonomics to application security. In order to provide a higher degree of confidence in the optimal combinations of direct and transitive dependencies a team at Red Hat started Project Thoth. In this episode Fridolín Pokorný explains how the Thoth resolver uses multiple signals to find the best combination of dependency versions to ensure compatibility and avoid known security issues.</p> <h2>Announcements</h2> <ul> <li>Hello and welcome to Podcast.__init__, the podcast about Python&#8217;s role in data and science.</li> <li>When you&#8217;re ready to launch your next app or want to try a project you hear about on the show, you&#8217;ll need somewhere to dep...