Training »

Open Source Dependency Governance

Class length: 0.5 days (customizable)

Node.js-based projects, including projects using Angular (and most other web frameworks) rely on an ecosystem of open-source packages via the npm package manager's public repository. While that public repository contains an abundance of useful, freely-available packages, its use in enterprise-scale applications comes with potential security and licensing risks to understand and manage.

In this class we will:

  • Explain how the npm package manager works
  • Explain how the npm public repository works including policies by npm, Inc. that affect how public packages work in the npm ecosystem
  • Explore how to govern third-party open source dependencies in Angular and Node.js applications
  • Investigate tools for governing third-party open source npm dependencies

The class/session is oriented toward enterprise users of Angular and similar frameworks, and can include substantial discussion, especially for private engagements.


In addition to this open source / third party dependency governance topic, we also offer a class on application / project / program governance. Our governance offerings generally use Angular-related technologies for examples and specifics, but the material generally applies far beyond Angular.

Who Should Attend?

This class is designed for managers, project leaders, and software developers who need to evaluate and manage risk from third-party open source dependencies in enterprise-scale Angular applications.

Prerequisites and requirements

  • An understanding of the process of writing software that uses external, third-party code
  • Prior exposure to single-page applications
  • Experience writing code with Angular is not necessary, but knowledge about Angular in general will be beneficial

Proven results

We have trained thousands of developers at hundreds of companies, including numerous global leaders.

Two ways to learn

1) Training for your team,

For corporate groups and other organizations, we offer live in-person or online instruction. These teams typically have advanced needs, so we provide customized, hands-on assistance.

Before each class, our instructors listen to your needs in depth and adjust the agenda. We can follow-up a class with consulting assistance, or combine multiple classes into a longer workshop week.

Contact us about a private class

2) Live-instructor public classes,
coming soon

Want to attend as an individual or small group? We are creating public, open enrollment versions of many of our classes, including this one.

Unlike canned video training, live instructor online classes offer frequent opportunities for detailed Q&A discussion.

This class isn't quite ready yet, but follow us on social media (bottom of the page) or keep an eye on our website for announcements. We will show the schedule of upcoming open enrollment class dates prominently.

Topic outline


Oasis Digital instructors have extensive experience with both Angular and numerous surrounding technologies; here are some of them. The specific instructor(s) assigned to your class will depend on which class or class topics (we customize!) are put together, availability, additional consulting needs, etc.

Training FAQs

Q: Is this taught "in person"?
A: We offer training both in-person and online via remote conferencing.
Q: How does the remote option work?
A: Much like an in-person class, it is conducted by our expert trainers, in real time. The trainers can answer questions, assist with trouble students are having, etc. We strive to offer as much of the in-person experience as possible, online.
Q: Are there open enrollment public classes?
A: We currently only offer an open-enrollment "public" class for our flagship Angular Boot Camp.
Q: Can the content be customized?
A: For private team classes, we *always* discuss your goals, the class contents, any specials areas for extra coverage, etc. in advance. We customize both the contents and length (number of days) to your needs.
Q: Can we schedule a private class any time?
A: Our classes are taught by developers who use the subject technologies in their daily work, so we don't assign "any" available developer/trainer to any particular class, but only to classes with a strong experience and knowledge match. Please contact us to arrange a date.