LESSON 4.3
Dependency and supply chain risk
Learn key techniques and workflows in Practical Web Security.
13m
intermediate
5,728 students
Overview
Most of your production code came from someone else. Lockfiles, audits, and update discipline are what keep that manageable.
In this lesson you will:
- Pin dependencies with a committed lockfile
- Audit for known vulnerabilities continuously
- Review what a new dependency actually pulls in
Pro Tip
Use caching and revalidation wisely to ensure your app stays fast and data remains fresh without unnecessary requests.