- another good practice is to create local git repos before changing any dot-files.
- etc.
I prefer to have the build and runtime environments be independent of the host machine to some degree, so there are docker images available for executing the build, these contain stuff like compilers and libraries and even npm cache for nodejs stuff
2. There is also an issue of hardening the system.