Third party dependencies

Send me a textShoutout to Jason Zurita for his article https://jasonzurita.com/the-hidden-cost-of-dependencies/What are third party dependencies? Explain the distinction between: 1st party, for iOS devs, anything in the iOS SDK.2nd party dependencies, stuff integration from service provider you rely on. (You could call this a subset of 3rd party dependencies you really can not do without.)3rd party, stuff you integrate because it saves your time or it is convenientRisks with 3rd party code Complexity (thank you Jason) Managing versionsTry updating a dependency in a Node’js codebase.Build times, more code == more waiting3rd party code problems are often now your problems OSS frameworks only have a guarantee until the door3rd party code often intertwines deeply with your implementation if you are not very careful REALM or other data serialization libs are a great exampleSecurity You choose to adopt all this third party code including all its warts, problems, issues and hidden problems. Enterprises often require a 100 percent review of any third party code. There is a reason big corps at some point try and loose as many dependencies.Third party dependant developer syndrome (this is a fun one) Not invented here syndrome should also be avoided thoughHow to find third party dependencies CocoaPods index.Swift Package Index, mention we sponsor them. Only mention this once briefly We also sponsor TuistGithub and Google searchLicensing an the app store GPL is “difficult”An Apache or MIT type license is reasonable If you are unsure, read up a bit on licenses. https://opensource.org/licensesHow to choose to adopt a dependency Just link it won’t doReview the dependency and project health on Github. What quality checks does the project have in place?How does the support by the dev(s) look to you?Would you pay for this feature set if it wasn’t available for free? If yes, WHY ARE YOU NOT SPONSORING THIS PROJECT?How to deal with dependencies in the long run? Often you have to adopt the whole dependency as a whole at some point. Openly: Publish pull requests, maybe even become a maintainer.Privately: Take the source, snip out anything you do not need. Make it your own... But always respect the original license terms.Say goodbyeJoin me in Amsterdam for Do iOS 2025, tickets and details available now. Lead Software Developer Learn best practices for being a great lead software developer.Support the showDo iOS: https://do-ios.comRate me on Apple Podcasts.Send feedback on SpeakPipeOr contact me:Mastodon: https://hachyderm.io/@appforce1X: https://x.com/appforce1BlueSky: https://bsky.app/profile/appforce1.netLinkedIN: https://www.linkedin.com/in/leenarts/Support my podcast with a monthly subscription, it really helps.My book: Being a Lead Software Developer