I published "Best practices for dependency management", a high-level overview of general principles for avoiding common pitfalls with dependencies.

https://cloud.google.com/blog/topics/developers-practitioners/best-practices-dependency-management