Loading…
May 10-12, 2023
Vancouver, British Columbia, Canada + Virtual
View More Details & Registration
Note: The schedule is subject to change.

The Sched app allows you to build your schedule but is not a substitute for your event registration. You must be registered for Open Source Summit North America 2023 to participate in the sessions. If you have not registered but would like to join us, please go to the event registration page to purchase a registration.

This schedule is automatically displayed in Pacific Daylight Time (UTC/GMT -8). To see the schedule in your preferred timezone, please select from the drop-down menu to the right, above "Filter by Date."

IMPORTANT NOTE: Timing of sessions and room locations are subject to change.

Back To Schedule
Friday, May 12 • 11:55am - 12:02pm
Lightning Talk: Smaug's Cave: Studying Thousands of Gems at Shopify - Jacques Chester, Shopify

Sign up or log in to save this to your schedule, view media, leave feedback and see who's attending!

Tweet Share
Feedback form is now closed.
You know you have a lot of dependencies. Lately you've started tracking them somehow. That's good! But what does it tell you about long term trends? Very little, because you don't have historical data from the time before you began to systematically collect dependency information.

This is the situation we found ourselves in at Shopify recently. We had questions about the variety of gems and velocity of updates for RubyGem dependencies in our services estate over the history of our repos, but only had data collected for a fraction of that history.

In this talk Jacques will outline what we did to reconstruct the history of our gem usage, what key facts and trends we learned, and what lessons we learned along the way.
Speakers
avatar for Jacques Chester

Jacques Chester

Senior Staff Software Developer, Shopify
Jacques is a Senior Staff Software Developer in Shopify's Ruby Dependency Security team under the Ruby & Rails Infrastructure group. He leads work on upstream and community improvements to supply chain security, with a focus on the Ruby ecosystem. Previously he worked in cloud native... Read More →

Jacques Chester OSS 2023 pdf
Friday May 12, 2023 11:55am - 12:02pm PDT
121 (Level 1)
  SupplyChainSecurityCon, Measuring Risk of Potential & Already-included OSS
  • Session Slides Attached Yes