PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Avoiding the Hazards of Dependencies - Part 2

hackerone.com | blog | #supply-chain | #ios | #best-practices | #swift | #mobile-development | #dependencies
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Mobile developer Chris Griffith shares practices for mitigating third-party dependency risks, including abstraction layers that ease library removal, with Swift examples applicable across platforms.
Published
Collected

Related coverage

blog · hackerone.com
Navigating the Perils of Race Conditions in iOS App Development
Reviews race conditions in iOS development: use serial DispatchQueue to synchronize shared resource access and ensure UI updates run on the main thread to avoid data corruption and crashes.
blog · hackerone.com
Avoiding the Hazards of Dependencies - Part 1
Chris Griffith examines the risks of relying on third-party libraries in mobile apps, framed by a crash traced to an ad provider, and lists questions teams should answer before adopting any dependency.
blog · hackerone.com
The Most Common Issues I've Caught Reviewing iOS Apps
PullRequest reviewer Chris Griffith covers common iOS review findings, including UITableView and UICollectionView misuse: failing to recycle cells and rebuilding section header views needlessly.
blog · hackerone.com
The Most Common Issues I've Caught Reviewing Swift
PullRequest reviewer Chris Griffith covers common Swift review issues, starting with misunderstandings of ARC reference counting and ownership across strong, weak and unowned references.
blog · hackerone.com
Why is NPM Fetching a Dependency Not in My package-lock.json?
npm can fetch dependencies missing from package-lock.json when packages come from GitHub repos, relative paths, or carry peer dependencies; the post explains why and how to manage it safely.
blog · hackerone.com
Setting Up Firebase in an iOS App
Chris Griffith walks through Firebase setup in iOS apps beyond the stock install, covering complications that arise in complex projects with multiple build configurations and many third-party tools.
Back