10 Problems Large Companies Have Managing C++ Dependencies and How to Solve Them
Talkat CppCon 2024 · on Tuesday, 2024-09-17· at 16:45· Adams A, 6700 North Gaylord Rockies Boulevard·
summary
Talk gives concrete fixes not platitudes: it reports interviews with over 15 large teams, compares package managers like vcpkg and Conan, shows a demo building 23 libraries built from source with CMake and a binary cache, and explains using a baseline git commit for curated versions. It spells out CI-driven binary caching, ABI-hash construction, offline asset caches, SBOM generation, sanitizer and fuzzing strategies, and a staged migration plan with measurable milestones.
AI-written summary · about
chapters (11)
- 0:00Managing C++ dependencies
- 5:43Package managers for dependencies
- 14:48Source vs pre-built libraries
- 27:15Open source dependencies
- 34:18Offline asset caches
- 35:00Security vulnerabilities
- 40:57Centralizing dependency tasks
- 44:26Software bills of materials
- 48:02Reproducible builds
- 52:36Big environment changes
- 57:50Summary and sharing
related talks
01h 11mThe State of Package Management in C++
01h 03mC++ Package Manager - C++ Dependencies Don't Have To Be Painful!
57mKeynote: How To Address 7 Major C++ Pain Points with Tools
50mModern DevOps in C and C++
01h 01mGit, CMake, Conan - How to ship and reuse our C++ projects
01h 20mContinuous Integration for Large Scale C/C++ Projects With Conan2
01h 00mHow to start a modern C++ project
37mCross-Building Strategies in the Age of C++ Package Managers