Fashionable software program depends closely on open supply dependencies, typically pulling in 1000’s of packages maintained by builders all around the world. This accelerates innovation but additionally creates severe provide chain dangers as attackers more and more compromise common libraries to unfold malware at scale.
Feross Aboukhadijeh is the founder and CEO of Socket which is a safety platform designed to guard software program initiatives from open supply provide chain assaults. On this episode he joins Josh Goldberg to speak about his profession in open supply, open supply provide chain assaults, sensible safety classes, the increasing assault floor in software program improvement, and extra.
Josh Goldberg is an impartial full time open supply developer within the TypeScript ecosystem. He works on initiatives that assist builders write higher TypeScript extra simply, most notably on typescript-eslint: the tooling that permits ESLint and Prettier to run on TypeScript code. Josh commonly contributes to open supply initiatives within the ecosystem comparable to ESLint and TypeScript. Josh is a Microsoft MVP for developer applied sciences and the writer of the acclaimed Studying TypeScript (O’Reilly), a cherished useful resource for any developer looking for to study TypeScript with none prior expertise exterior of JavaScript. Josh commonly presents talks and workshops at bootcamps, conferences, and meetups to share information on TypeScript, static evaluation, open supply, and normal frontend and internet improvement.
Please click on right here to see the transcript of this episode.
Sponsorship inquiries: [email protected]