TODOS

• [ ] https://blog.holz.nu/2024/03/29/0.html
• [ ] https://www.danisch.de/blog/2024/04/01/die-xz-attacke/
• [ ] https://research.swtch.com/xz-timeline
• [ ] Remove Spring Boot dependency.
• [ ] Create guidelines for dependencies.
• [ ] The Open Source Software Supply Chain Isn't REAL!!
• https://www.softwaremaxims.com/blog/not-a-supplier

Disclaimer no Linux expert

The attack on xz

That is the cause for this commentary.

Small vs big dependencies

Quality is a Myth

Everybody hates Systemd

Why UNO is so ineffective?

Any Real solution will be likely a badly perceived solution.

M2 repo inside git repositories

Consequences for Network Project

• [ ] Custom adaptable and injectable API ar important. The absent makes dependency problems bigger.
• [ ] There will not be a fix for such attacks for now, but a TODO regarding this in the dependency guidelines is required.
• [ ] Limited backward compatibility