top of page


A personal blog addressing software quality across all aspects of software development, testing, design, and people.
Search


Managing Open Source and Dependency Risk
Modern software development rarely starts from a blank page. Instead, applications are assembled from a vast ecosystem of frameworks, libraries, and open-source components that accelerate development and enable teams to build complex systems quickly. In many cases, the majority of an application’s functionality comes not from code written internally, but from external dependencies - and lately, AI. This shift has dramatically improved developer productivity, but it has also i
Craig Risi
3 days ago4 min read


Measuring AI Usage and Safety in the Software Development Lifecycle
We’ve explored a range of approaches to measuring software delivery and ensuring teams build effectively in my recent posts. From well-established engineering and testing practices to modern delivery metrics. The metrics we’ll explore today, however, are far newer, emerging in response to the rapidly evolving role of AI in the software development lifecycle. As AI becomes embedded in the software development process, from code generation to testing and documentation, engineer
Craig Risi
Apr 104 min read
bottom of page