Cox: Our Software Dependency Problem

Here is an extensive look at
handling software dependencies from Russ Cox. 'Dependency
managers have scaled this open-source code reuse model down: now,
developers can share code at the granularity of individual functions of
tens of lines. This is a major technical accomplishment. There are myriad
available packages, and writing code can involve such a large number of
them, but the commercial, legal, and reputational support mechanisms for
trusting the code have not carried over. We are trusting more code with
less justification for doing so.'