Managing Dependencies

Dependencies are external libraries used by a project, it can be npm packages, gems, and hex packages.

During development

Update as often as possible.

MVP + Launch

Update as often as possible.

Live projects with a full team

Minor versions is okay anytime.

Major versions need proper release and testing schedules.

For a project with a full team, things should be regularly updated.

Live projects with a full team and with real transactions

Be very careful.

Watch out for major version upgrades and breaking changes.

Live projects without a team

Security updates only.

You can't fire and forget these things.

Don't update if no one will test it or manage the project.

Dead projects

Depends on the team involved.

Usually there's no point of updating dependencies except for security issues.

Taking over a project

Update as often as possible.