---
title: "Running Software on Software You’ve Never Run"
description: "!https://blog.jim-nielsen.com/2025/run-software-on-software-youve-never-run/"
date: 2025-09-29
published: true
tags:
  - dev
  - thought
template: link
---


<div class="embed-card embed-card-external">
  <a href="https://blog.jim-nielsen.com/2025/run-software-on-software-youve-never-run/" class="embed-card-link" target="_blank" rel="noopener noreferrer">
    <div class="embed-card-content">
      <div class="embed-card-title">Running Software on Software You’ve Never Run</div>
      <div class="embed-card-description">Writing about the big beautiful mess that is making things for the world wide web.</div>
      <div class="embed-card-meta">blog.jim-nielsen.com</div>
    </div>
  </a>
</div>


Running software applications in production today is crazy.  One point release opens up for supply chain attacks.  What's crazier is not running your production applications without a lock file, potentially running dependencies you've never ran before for the first time in prod.