Editing Software Engineering (Fall 2025) (section)

== Sprint 2  ==



=== November 4 (Tuesday) -- Evidence Part 2: Evaluating Evidence, DevOps and Dora===

Note: Class will be via zoom on this day

'''Before Class'''
* Read [https://canvas.uw.edu/courses/1838606/files/folder/Week%207?preview=140745676 Reading Note 11]
* Watch [https://canvas.uw.edu/courses/1838606/files/folder/Week%207?preview=140745489 my mini-lecture on Evidence, DevOps, and DORA]
* Do readings:
** Read only page 1 - 7 and 27 - 31 [https://canvas.uw.edu/courses/1838606/files/folder/Week%207?preview=140631953 of this article from Flournoy, Lee, Wu, and Hicks.]
** Read this [https://canvas.uw.edu/courses/1838606/files/folder/Week%206?preview=140235323 introduction to Ch 1 and all of Ch 2] of '''Making Software''', edited by Oram and Wilson.
** Read the [https://dora.dev/guides/dora-metrics-four-keys/ Four Key] DORA Metrics



'''Class Goals:'''
* Discuss Reading Note 11
* Standup
* Hands-on / triage issues with Task 6


'''In-Class Materials'''
* [https://canvas.uw.edu/courses/1838606/files/folder/Week%207?preview=141442093 Miro board]


'''Optional Reading:'''
* The entire Flournoy et al. article is great; I'd be happy to talk more about it with anyone interested
* This is a helpful [https://thenewstack.io/platform-engineering/sre-vs-devops-vs-platform-engineering/ article on the differences] between DevOps, Site Reliability Engineering (SRE), and Platform Engineering.
* I've assigned excerpts from '''Making Software''', but the Library subscribes to an e-book version of the whole work. You can [https://learning.oreilly.com/library/view/making-software/9780596808310/ read it via the O'Reilly online subscription]
* I recently published an article on [https://canvas.uw.edu/courses/1838606/files/folder/Week%207?preview=140631523 measuring software risk] in the journal '''Empirical Software Engineering'''.

=== November 6 (Thursday) -- Infrastructures and Supply Chains (Part 1) ===

Case: Left-pad

Note: Class will be via zoom this day.

'''Before Class'''
* Read [https://canvas.uw.edu/courses/1838606/files/folder/Week%207?preview=140950553 Reading Note 12]
* Watch my [https://canvas.uw.edu/courses/1838606/files/folder/Week%207?preview=140950602 mini-lecture on Infrastructures and Supply Chains Part 1] (45m)
* Prepare Case Material
** Read [https://arstechnica.com/information-technology/2016/03/rage-quit-coder-unpublished-17-lines-of-javascript-and-broke-the-internet/ Ars Technica's analysis]
** Read [https://blog.npmjs.org/post/141577284765/kik-left-pad-and-npm NPM's account of the situation]
** Read [https://www.davidhaney.io/npm-left-pad-have-we-forgotten-how-to-program/ NPM & Left-pad: Have We Forgotten How to Program?]
** Read [https://www.tigrisdata.com/blog/ai-left-pad/ AI's Impending Left-pad Scenario]

'''Class Goals:'''
* Discuss Reading Note 12
* Standup
* Co-working time on Bot Task 6

'''In-class Materials:'''
* [https://canvas.uw.edu/courses/1838606/files/folder/Week%207?preview=141442095 Miro board]


'''Optional Reading:'''
There are many other analyses and responses to this issue to read and enjoy.
* [https://edunham.net/2016/03/24/could_rust_have_a_left_pad_incident.html Could this happen to Rust?]
* [https://azerkoculu.com/posts/left-pad Koculu's recollection and retrospective]
* Someone even wrote [http://left-pad.io/ a snarky microservice]


<!-- Dependencies, Ch 20 in making software -->

=== November 11 (Tuesday) -- No class: Veterans Day === 

=== November 13 (Thursday) -- Infrastructures and Supply Chains (Part 2) ===
Note: Class will be via Zoom this day

Case: Log4J

'''Before Class'''
* [https://canvas.uw.edu/courses/1838606/files/folder/Week%208?preview=141248498 Read Reading Note 13]
* Watch my mini-lecture -- [https://canvas.uw.edu/courses/1838606/files/folder/Week%208?preview=141408696 Infrastructure and Supply Chains Part 2]
* Prepare Case Material
** Read [https://github.blog/open-source/inside-the-breach-that-broke-the-internet-the-untold-story-of-log4shell/ this account of the incident] (from the GitHub blog) -- no need to watch the video, it's a bit long.
** Read the Wikipedia article on [https://en.wikipedia.org/wiki/Dependency_hell Dependency Hell]
** Read the [https://www.cisa.gov/sbom CISA webpage about SBOMs]
** Read this blog post with [https://federalnewsnetwork.com/commentary/2022/10/when-will-sboms-finally-benefit-the-federal-governments-software-supply-chain/ a forecast on SBOMs]
** Read this blog post explaining the [https://www.chainguard.dev/unchained/software-dark-matter-is-the-enemy-of-software-transparency dark matter critique of SBOMs]

'''Class Goals:'''
* Discuss Reading Note 13
* Hands-on activities
* Standup
* Hands-on / triage issues with Bot task 6

'''Class Materials:'''
* [https://canvas.uw.edu/courses/1838606/files/folder/Week%208?preview=141676159 Miro board]

<!--
'''Optional Reading:'''

Dependencies?? Triage?? Bug-prone areas?? Generative AI something something? Guest Speaker?

-->

<!-- Beyond Lines of Code Ch 8 of Making Software -->

=== November 18 (Tuesday) -- Quality, the -ibles, and Trade-offs ===

'''Before Class'''
* Read [https://canvas.uw.edu/courses/1838606/files/folder/Week%209?preview=141441922 Reading Note 14]
* Watch my mini-lecture on [https://canvas.uw.edu/courses/1838606/files/folder/Week%209?preview=141414813 Quality, the -ibles, and Trade-offs]
* Prepare Case Material
** Read [https://imwrightshardcode.com/2024/02/how-to-pay-off-technical-debt/ How to pay off Technical Debt] from the 'I.M. Wright' blog
** Read [https://canvas.uw.edu/courses/1838606/files/folder/Week%209?preview=141391393 Speed at the Cost of Quality] by He et al (2025)

'''Class Goals:'''
* Discuss Reading Note 14
* Standup
* Hands-on / triage issues with Task 6

'''In-class Materials:'''
* [https://canvas.uw.edu/courses/1838606/files/folder/Week%209?preview=141840107 Miro board]

'''Optional Reading:'''
* Material in my lecture is adapted from my paper [https://canvas.uw.edu/courses/1838606/files/folder/Week%209?preview=141391533 Qualities of Quality: A Tertiary Review of Software Quality Measurement Research]

=== November 20 (Thursday) -- Code review ===

'''Special guest speaker: Aaron Halfaker'''

Aaron Halfaker is a Principal Applied Research Scientist at [https://www.microsoft.com/en-us/research/people/ahalfaker/ Microsoft], working in Experiences and Devices. His work is changing what it means to be a software engineer. He'll talk about how maintaining software products changes when you have an AI component, his view on where the opportunities are for doing work with LLMs, and the shifts he is seeing in the job market for fresh CS grads. 

'''Before Class'''
* Read [https://canvas.uw.edu/courses/1838606/files/folder/Week%209?preview=141659077 Reading Note 15]
* Watch [https://canvas.uw.edu/courses/1838606/files/folder/Week%209?preview=141665701 my mini-lecture on code review]
* Read [https://canvas.uw.edu/courses/1838606/files/folder/Week%209?preview=141657976 Ch 18] from Oram and Wilson's '''Making Software''' 
* Read [https://canvas.uw.edu/courses/1838606/files/folder/Week%209?preview=141658106 this article from Vijayvergiya et al (2024)] on AI-Assisted code review.

'''Class Goals:'''
* [https://canvas.uw.edu/courses/1838606/files/folder/Week%209?preview=141659077 Discuss Reading Note 15]
* In-class activity
* Standup
* Hands-on / triage issues with Task 6

'''In-class Resources:'''
* [https://canvas.uw.edu/courses/1838606/files/folder/Week%209?preview=141997632 the Miro discussion board]

'''Optional:'''

* Alberto Bacchelli: [https://youtu.be/_SJL7vepQvU?si=UP5OSH_1GauBe_w5 How code review works (and doesn't) in the real world]
* Kelly Blincoe: [https://youtu.be/qaO00CLqLkI?si=9M79HVFAOCJD6Dau The effects of destructive criticism in code review]
* Chouchen et al (2021): [https://canvas.uw.edu/courses/1838606/files/folder/Week%209?preview=141658629 Anti-patterns in modern code review]

=== November 21 (Friday) ===
[[#Bot Project Task #6|Bot Project Task 6]] (version 2.0) Due at 11:59 p.m. Pacific time.