{"repo":"dropbox/dependency-guard","free":true,"listed":false,"github":"https://github.com/dropbox/dependency-guard","clone":"git clone https://github.com/dropbox/dependency-guard.git","description":"A Gradle plugin that guards against unintentional dependency changes.","language":"Kotlin","stars":492,"topics":["android","build","build-tool","dependencies","gradle","gradle-plugin","dependency-guard","kotlin","kotlin-dsl"],"license":"Apache-2.0","category":"mobile-apps","readme_excerpt":"🛡️ Dependency Guard A Gradle plugin that helps you guard against unintentional dependency changes . Surface Transitive Dependency Changes Comparison to a baseline occurs whenever you run the dependencyGuard Gradle task. A small single version bump of androidx.activity from 1.3.1 - 1.4.0 causes many libraries to transitively update. Provide Custom Rules for Allowed Dependencies For a given configuration, you may never want junit to be shipped. You can prevent this by modifying the allowedFilter rule to return !it.contains(\"junit\") for your situation. Why Was Dependency Guard Built? As platform engineers, we do a lot of library upgrades, and needed insight into how dependencies were changing over time. Any small change can have a large impact. On large teams, it's not possible to track all dependency changes in a practical way, so we needed tooling to help. This is a tool that surfaces these changes to any engineer making dependency changes, and allows them to re-baseline if it's intentional. This provides us with historical reference on when dependencies (including transitive) are changed for a given configuration. Goals: - Surface transitive and non-transitive dependencies changes for our production build configurations. This helps during version bumps and when new libraries are added. - Provide the developer with the ability to easily accept changes as needed. - Add deny-listing for production build configurations to explicitly block some dependencies from production. - Inc","default_branch":null,"files":null,"tree":[],"storefront":"/r/dropbox","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/dropbox/dependency-guard/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}