JS Party: JavaScript, CSS, Web Development

Making moves on supply chain security

Listen Later

Feross has been working on something big. He joins Chris and Nick, along with guests Bret Comnes and Mik Lysenko to discuss Socket, what it is, and its focus on the security of the JavaScript supply chain.

Join the discussion

Changelog++ members save 5 minutes on this episode because they made the ads disappear. Join today!

Sponsors:

  • Raygun – Never miss another mission-critical issue again — Raygun Alerting is now available for Crash Reporting and Real User Monitoring, to make sure you are quickly notified of the errors, crashes, and front-end performance issues that matter most to you and your business. Set thresholds for your alert based on an increase in error count, a spike in load time, or new issues introduced in the latest deployment. Start your free 14-day trial at Raygun.com
  • Square – Develop on the platform that sellers trust. There is a massive opportunity for developers to support Square sellers by building apps for today’s business needs. Learn more at changelog.com/square to dive into the docs, APIs, SDKs and to create your Square Developer account — tell them Changelog sent you.
  • Sourcegraph – Move fast, even in big codebases. Sourcegraph is universal code search for every developer and team. Easily search across all the code that matters to you and your organization: find example code, explore and read code, debug issues, and more. Head to info.sourcegraph.com/changelog and click the button “Try Sourcegraph now” to get started.
  • SignalWire – Build what’s next in communications with video, voice, and messaging APIs powered by elastic cloud infrastructure. Try it today at signalwire.com/video and mention “Go Time” to receive an extra 5,000 video minutes.

    • Featuring:

    • Bret Comnes – Website, GitHub, X
    • Mikola Lysenko – GitHub, X
    • Nick Nisi – Website, GitHub, Mastodon, X
    • Christopher Hiller – Website, GitHub, Mastodon, X
    • Feross Aboukhadijeh – Website, GitHub, X

    Show Notes:

    • 0 FPS
    • Changelog #482 - Securing the open source supply chain
    • Socket
    • React on Socket
    • npm audit
    • Lighthouse
    • peacenotwar supply chain attack
    • If you’re writing your first npm package: I highly recommend keeping it

      • Something missing or broken? PRs welcome!

      ...more
      View all episodesView all episodes
      Download on the App Store
      JS Party: JavaScript, CSS, Web DevelopmentBy Changelog Media
      • 4.7
      • 4.7
      • 4.7
      • 4.7
      • 4.7

      4.7

      90 ratings

      More shows like JS Party: JavaScript, CSS, Web Development

      View all
      The Changelog: Software Development, Open Source by Changelog Media

      The Changelog: Software Development, Open Source

      289 Listeners

      RikaTillsammans | Om privatekonomi & rikedom i livet by Jan och Caroline Bolmeson

      RikaTillsammans | Om privatekonomi & rikedom i livet

      9 Listeners

      Syntax - Tasty Web Development Treats by Wes Bos & Scott Tolinski - Full Stack JavaScript Web Developers

      Syntax - Tasty Web Development Treats

      988 Listeners

      Darknet Diaries by Jack Rhysider

      Darknet Diaries

      8,039 Listeners

      HTML All The Things - Web Development, Web Design, Small Business by Matt Lawrence and Mike Karan

      HTML All The Things - Web Development, Web Design, Small Business

      48 Listeners

      The Stack Overflow Podcast by The Stack Overflow Podcast

      The Stack Overflow Podcast

      63 Listeners

      Front-End Fire by TJ VanToll, Paige Niedringhaus, Jack Herrington

      Front-End Fire

      11 Listeners