XXccelera AI·1d agoBatch-Fixing CVEs Across Repos With AI AgentsLearn how AI agents batch fix CVEs across repos: dedupe findings, upgrade packages, test every fix, and open reviewed pull requests with evidence.6 min read·xccelera.hashnode.dev
XXccelera AI·Oct 16Architecture of an AI Security Dependency Upgrader and Vulnerability Auto-ResolverHow an AI dependency upgrader and vulnerability auto-resolver works: five layers from detection to feedback, with patch validation and approval.6 min read·xccelera.hashnode.dev
XXccelera AI·Oct 8Dependency Management for Parallel Multi-Agent ExecutionParallel multi-agent execution amplifies errors when dependencies go undeclared. Learn how to map, enforce, and monitor them to avoid rework.5 min read·xccelera.hashnode.dev
KKhushi Trivedi·Sep 26AI Is Writing Your Dependencies Now. Here's the New Attack Surface.LLMs hallucinate package names 5–22% of the time. Attackers register them first. How slopsquatting works, real incidents & what verified libraries fix5 min read·khushitrivedi.hashnode.dev
SSancharini Panda·Sep 10Dependency Mocking and Service Virtualization: Make Every CI Test Deterministic Stop writing stubs by hand. Compare dependency mocking and service virtualization & learn how Keploy auto-generates deterministic mocks from real traffic.18 min read·community.keploy.io
JJack Li·Sep 7Vibe coding made writing cheap. It made reading expensive. AI didn't make writing code free — tokens cost real money. It moved the bottleneck to reading. Why a three-line diff can break eleven files, and why Find All References won't tell you.10 min read·crossui.hashnode.dev
JJeremy Longshore·Jul 14The Kernel Must Not Import Its AgentsThere is a moment in the life of every framework where an application-shaped thing has grown up inside it. It started as a demo, a reference implementation, a "let's just prove the primitives work" sp12 min read·jeremylongshore.hashnode.dev
JJeremy Longshore·Jul 1Transitive CVE Clearance: The Dual-Layer PatternYou bump a direct dependency to pull in a patched transitive. bun audit goes green. The lockfile is committed. Two weeks later, someone does a clean install on a fresh machine, and the vulnerable tran6 min read·jeremylongshore.hashnode.dev
DDaniel Westgaard·Jun 8Backstage alternatives in 2026: first ask why you wanted BackstageEvery \"Backstage alternatives\" roundup lists the same five portals. None of them asks the question that decides which alternative is right: what job sent you looking in the first place?13 min read·riftmap.hashnode.dev
MMadukoma Blessed·Apr 10Dependency Management Revisited: Lockfiles, Vendoring, and What They Actually GuaranteeA practical look at dependency management: how lockfiles and vendoring differ, what guarantees they provide, and when each approach is necessary.7 min read·mblessed.hashnode.dev
