--- title: "#dependency-management articles | Hashnode" description: "Explore 90 articles tagged #dependency-management on Hashnode. Tutorials, guides, and how-tos from the community." url: "https://hashnode.com/tag/dependency-management" --- Tag # #dependency-management 90 posts · 3 followers [Xccelera AI](https://hashnode.com/@xccelera) · [1d ago](https://hashnode.com/posts/batch-fixing-cves-across-repos-with-ai-agents/6af2edbf82596ba802d42d6b) ### [Batch-Fixing CVEs Across Repos With AI Agents](https://xccelera.hashnode.dev/batch-fixing-cves-across-repos-with-ai-agents?utm_source=hashnode&utm_medium=feed) Learn how AI agents batch fix CVEs across repos: dedupe findings, upgrade packages, test every fix, and open reviewed pull requests with evidence. 6 min read · [xccelera.hashnode.dev](https://xccelera.hashnode.dev/batch-fixing-cves-across-repos-with-ai-agents?utm_source=hashnode&utm_medium=feed) [Xccelera AI](https://hashnode.com/@xccelera) · [Oct 16](https://hashnode.com/posts/architecture-of-an-ai-security-dependency-upgrader-and-vulnerability-auto-resolver/6ad2058ab33cee371801b00b) ### [Architecture of an AI Security Dependency Upgrader and Vulnerability Auto-Resolver](https://xccelera.hashnode.dev/architecture-of-an-ai-security-dependency-upgrader-and-vulnerability-auto-resolver?utm_source=hashnode&utm_medium=feed) How an AI dependency upgrader and vulnerability auto-resolver works: five layers from detection to feedback, with patch validation and approval. 6 min read · [xccelera.hashnode.dev](https://xccelera.hashnode.dev/architecture-of-an-ai-security-dependency-upgrader-and-vulnerability-auto-resolver?utm_source=hashnode&utm_medium=feed) [Xccelera AI](https://hashnode.com/@xccelera) · [Oct 8](https://hashnode.com/posts/dependency-management-for-parallel-multi-agent-execution/6ac7794a5dc6fc6bda51d67d) ### [Dependency Management for Parallel Multi-Agent Execution](https://xccelera.hashnode.dev/dependency-management-for-parallel-multi-agent-execution?utm_source=hashnode&utm_medium=feed) Parallel multi-agent execution amplifies errors when dependencies go undeclared. Learn how to map, enforce, and monitor them to avoid rework. 5 min read · [xccelera.hashnode.dev](https://xccelera.hashnode.dev/dependency-management-for-parallel-multi-agent-execution?utm_source=hashnode&utm_medium=feed) [Khushi Trivedi](https://hashnode.com/@trivedi-khushi) · [Sep 26](https://hashnode.com/posts/ai-is-writing-your-dependencies-now-here-s-the-new-attack-surface/6ac8580a6ea17c4e9b6757c9) ### [AI Is Writing Your Dependencies Now. Here's the New Attack Surface.](https://khushitrivedi.hashnode.dev/ai-is-writing-your-dependencies-now-here-s-the-new-attack-surface?utm_source=hashnode&utm_medium=feed) LLMs hallucinate package names 5–22% of the time. Attackers register them first. How slopsquatting works, real incidents & what verified libraries fix 5 min read · [khushitrivedi.hashnode.dev](https://khushitrivedi.hashnode.dev/ai-is-writing-your-dependencies-now-here-s-the-new-attack-surface?utm_source=hashnode&utm_medium=feed) [Sancharini Panda](https://hashnode.com/@sancharini) · [Sep 10](https://hashnode.com/posts/dependency-mocking-service-virtualization/6aa29fda6d39ebb26d27a200) ### [Dependency Mocking and Service Virtualization: Make Every CI Test Deterministic](https://community.keploy.io/dependency-mocking-service-virtualization?utm_source=hashnode&utm_medium=feed) Stop writing stubs by hand. Compare dependency mocking and service virtualization & learn how Keploy auto-generates deterministic mocks from real traffic. 18 min read · [community.keploy.io](https://community.keploy.io/dependency-mocking-service-virtualization?utm_source=hashnode&utm_medium=feed) [Jack Li](https://hashnode.com/@linb) · [Sep 7](https://hashnode.com/posts/vibe-coding-made-writing-cheap-it-made-reading-expensive/6a9eb9c45a634c6d8a61a3dd) ### [Vibe coding made writing cheap. It made reading expensive.](https://crossui.hashnode.dev/vibe-coding-made-writing-cheap-it-made-reading-expensive?utm_source=hashnode&utm_medium=feed) AI didn't make writing code free — tokens cost real money. It moved the bottleneck to reading. Why a three-line diff can break eleven files, and why Find All References won't tell you. 10 min read · [crossui.hashnode.dev](https://crossui.hashnode.dev/vibe-coding-made-writing-cheap-it-made-reading-expensive?utm_source=hashnode&utm_medium=feed) [Jeremy Longshore](https://hashnode.com/@jeremylongshore) · [Jul 14](https://hashnode.com/posts/the-kernel-must-not-import-its-agents/6a560e16934f4a48fe20bc10) ### [The Kernel Must Not Import Its Agents](https://jeremylongshore.hashnode.dev/the-kernel-must-not-import-its-agents?utm_source=hashnode&utm_medium=feed) There is a moment in the life of every framework where an application-shaped thing has grown up inside it. It started as a demo, a reference implementation, a "let's just prove the primitives work" sp 12 min read · [jeremylongshore.hashnode.dev](https://jeremylongshore.hashnode.dev/the-kernel-must-not-import-its-agents?utm_source=hashnode&utm_medium=feed) [Jeremy Longshore](https://hashnode.com/@jeremylongshore) · [Jul 1](https://hashnode.com/posts/transitive-cve-clearance-the-dual-layer-pattern-mr1lx6ml/6a449ee3d650997dc78d5ba5) ### [Transitive CVE Clearance: The Dual-Layer Pattern](https://jeremylongshore.hashnode.dev/transitive-cve-clearance-the-dual-layer-pattern-mr1lx6ml?utm_source=hashnode&utm_medium=feed) You bump a direct dependency to pull in a patched transitive. bun audit goes green. The lockfile is committed. Two weeks later, someone does a clean install on a fresh machine, and the vulnerable tran 6 min read · [jeremylongshore.hashnode.dev](https://jeremylongshore.hashnode.dev/transitive-cve-clearance-the-dual-layer-pattern-mr1lx6ml?utm_source=hashnode&utm_medium=feed) [Daniel Westgaard](https://hashnode.com/@danielw) · [Jun 8](https://hashnode.com/posts/backstage-alternatives-in-2026-first-ask-why-you-wanted-backstage/6a2647fca310674fdac62aaf) ### [Backstage alternatives in 2026: first ask why you wanted Backstage](https://riftmap.hashnode.dev/backstage-alternatives-in-2026-first-ask-why-you-wanted-backstage?utm_source=hashnode&utm_medium=feed) Every \\"Backstage alternatives\\" roundup lists the same five portals. None of them asks the question that decides which alternative is right: what job sent you looking in the first place? 13 min read · [riftmap.hashnode.dev](https://riftmap.hashnode.dev/backstage-alternatives-in-2026-first-ask-why-you-wanted-backstage?utm_source=hashnode&utm_medium=feed) [Madukoma Blessed](https://hashnode.com/@mblessed) · [Apr 10](https://hashnode.com/posts/dependency-management-revisited-lockfiles-and-vendoring/69d922e0c8e5007ddbc599f7) ### [Dependency Management Revisited: Lockfiles, Vendoring, and What They Actually Guarantee](https://mblessed.hashnode.dev/dependency-management-revisited-lockfiles-and-vendoring?utm_source=hashnode&utm_medium=feed) A practical look at dependency management: how lockfiles and vendoring differ, what guarantees they provide, and when each approach is necessary. 7 min read · [mblessed.hashnode.dev](https://mblessed.hashnode.dev/dependency-management-revisited-lockfiles-and-vendoring?utm_source=hashnode&utm_medium=feed)