Dependably guides https://dependably.ca/guides Evergreen how-tos from Dependably on package supply chains, certificates and exposure. en Why a package install returns 403, and what to do https://dependably.ca/guides/why-a-package-install-returns-403 https://dependably.ca/guides/why-a-package-install-returns-403 Sat, 05 Sep 2026 12:00:00 GMT A 403 from npm, pip or dotnet inside CI usually means a policy said no. How to tell policy from authentication, read the refusal, and fix the right thing. A certificate rotation checklist that reads what was served https://dependably.ca/guides/certificate-rotation-checklist https://dependably.ca/guides/certificate-rotation-checklist Sat, 05 Sep 2026 12:00:00 GMT Renewal jobs fail quietly and rotations install the wrong chain. A short checklist for checking the certificate a server actually serves, from outside. Triage a vulnerability advisory by exposure, not by count https://dependably.ca/guides/triage-a-vulnerability-advisory https://dependably.ca/guides/triage-a-vulnerability-advisory Sat, 05 Sep 2026 12:00:00 GMT When an advisory lands, a scanner lists every occurrence. How to answer which releases ship the package, whether code can reach it, and what to patch first.