How do you compile and maintain a list of 3rd party software services being integrated in your code base by devs?
Developer and PM interviews, Google/Excel sheet33%
Formal process to OK any integration via Jira/ticketing - then list is created/maintained76%
No clean way - Look at traffic rom VPS, use NDR, sort unique domains36%
Custom tool - goes and finds API calls embedded in code magically6%
257 PARTICIPANTS
Sort by:
Head of Corporate Development2 years ago
Who owns the process for formal ticketing? is it Product management, security, GRC and How is the hammer brought down? essentially in too many places I have seen the process exist but to actually see it work given differing levels of commitment via PMs is a major issue from an implementation perspective.
Head of Corporate Development2 years ago
What custom tools have you built?especially given that 3rd party APIs are rarely ever in openapi2/swagger compliant spec.
I would also add to this the increasing number of Javascript libraries. As we're not using CDNJS or anything similar but rather deploy the libraries in our own environment, maintaining and keeping track of them is complex.
This is specially true when it comes to security issues requiring to update the librairies.