Fashionable software program depends closely on open supply dependencies, typically pulling in hundreds of packages maintained by builders everywhere in the world. This accelerates innovation but in addition creates critical provide chain dangers as attackers more and more compromise fashionable libraries to unfold malware at scale.
Feross Aboukhadijeh is the founder and CEO of Socket which is a safety platform designed to guard software program initiatives from open supply provide chain assaults. On this episode he joins Josh Goldberg to speak about his profession in open supply, open supply provide chain assaults, sensible safety classes, the increasing assault floor in software program improvement, and extra.
Josh Goldberg is an unbiased full time open supply developer within the TypeScript ecosystem. He works on initiatives that assist builders write higher TypeScript extra simply, most notably on typescript-eslint: the tooling that allows ESLint and Prettier to run on TypeScript code. Josh repeatedly contributes to open supply initiatives within the ecosystem akin to ESLint and TypeScript. Josh is a Microsoft MVP for developer applied sciences and the writer of the acclaimed Studying TypeScript (O’Reilly), a cherished useful resource for any developer searching for to be taught TypeScript with none prior expertise outdoors of JavaScript. Josh repeatedly presents talks and workshops at bootcamps, conferences, and meetups to share data on TypeScript, static evaluation, open supply, and basic frontend and internet improvement.
Please click on right here to see the transcript of this episode.
Sponsorship inquiries: [email protected]
