@
Carver9527 #93
O'Reilly 官网地址:
https://learning.oreilly.com/library/view/software-engineering-at/9781492082781/原书第 436 页,第 21 章依赖管理
When engineers at Google try to import dependencies, we encourage them to ask this
(incomplete) list of questions first:
• Does the project have tests that you can run?
• Do those tests pass?
• Who is providing that dependency? Even among “No warranty implied” OSS projects, there is a significant range of experience and skill set—it’s a very differ‐
ent thing to depend on compatibility from the C++ standard library or Java’s Guava library than it is to select a random project from GitHub or npm. Reputation isn’t everything, but it is worth investigating.
• What sort of compatibility is the project aspiring to?
• Does the project detail what sort of usage is expected to be supported?
• How popular is the project?
• How long will we be depending on this project?
• How often does the project make breaking changes?
Add to this a short selection of internally focused questions:
• How complicated would it be to implement that functionality within Google?
• What incentives will we have to keep this dependency up to date?
• Who will perform an upgrade?
• How difficult do we expect it to be to perform an upgrade?