rseng-dependency-management

Covers the full lifecycle of third-party dependencies: vetting a library before adoption on every axis that matters — suitability, license, trust and vulnerabilities including the transitive tree, documentation, maintenance and version currency — then keeping dependencies current with lockfiles and automated updates, and replacing them when they rot. Use PROACTIVELY whenever a new dependency is about to be added,…