Cloud Native Rejekts NA (Los Angeles + Hybrid) 2021

depstat: Analyzing a Go Project’s Dependencies
10-09, 09:35–10:05 (US/Pacific), Main stage

This talk will be about the importance of tracking dependencies in a large project like Kubernetes and about "depstat" which is a tool created to track dependency updates to the Kubernetes codebase. The Kubernetes repository receives many pull requests each day many of which bring dependency changes with them. Most of the time, the maintainers manually have to spot these changes, determine their effects on the overall dependency tree, and then ping the pull request authors to take action. To avoid this and help better track the dependency updates, depstat was created. depstat is an upstream project which analyzes dependencies for go modules enabled projects. It currently runs as part of a prow job in the Kubernetes code repository and provides four crucial dependency-related metrics. "depstat" also provides the ability to analyze dependencies visually by creating a graph.

Arsh is an open source engineer from India, who is currently interning as a Member Of Technical Staff at VMware. Before this, he has worked as a Google Summer Of Code Student Developer with CNCF where he contributed to the "cert-manager" project. Previously he has also been a part of the Linux Foundation Mentorship Program where he contributed to upstream Kubernetes. He has also interned as a software engineer with Nirmata earlier where he worked on another CNCF project, Kyverno. He has been actively involved in the Kubernetes community and has also conducted workshops and sessions for new contributors to help them get started with open source.