How do you compile and maintain a list of 3rd party software services being integrated in your code base by devs?

Developer and PM interviews, Google/Excel sheet27%

Formal process to OK any integration via Jira/ticketing - then list is created/maintained76%

No clean way - Look at traffic rom VPS, use NDR, sort unique domains38%

Custom tool - goes and finds API calls embedded in code magically6%

252 PARTICIPANTS
2.4k viewscircle icon3 Comments
Sort by:
Strategic Banking IT advisor in Bankinga year ago

I would also add to this the increasing number of Javascript libraries.   As we're not using CDNJS or anything similar but rather deploy the libraries in our own environment, maintaining and keeping track of them is complex.

This is specially true when it comes to security issues requiring to update the librairies.

Head of Corporate Development2 years ago

Who owns the process for formal ticketing? is it Product management, security, GRC and How is the hammer brought down? essentially in too many places I have seen the process exist but to actually see it work given differing levels of commitment via PMs is a major issue from an implementation perspective.

Head of Corporate Development2 years ago

What custom tools have you built?especially given that 3rd party APIs are rarely ever in openapi2/swagger compliant spec. 

Content you might like

HashiCorp (Terraform, Vault, Packer, etc.)22%

Cloud infra automation (Ansible, Puppet, Chef, etc.)56%

APM (Datadog, AppD, SignalFX, NewRelic, etc.)10%

Others?10%

View Results

I am a huge fan of this technology20%

I find this technology very useful, yet have some slight doubts64%

I have quite a few doubts about this technology12%

I am not a fan of this technology at all2%

View Results