
JavaScript Supply Chain with Feross Aboukhadijeh
JavaScript Archives - Software Engineering Daily
JavaScript Security - What Makes That Hard?
One of the worst things about NPM right now is that when you go to the NPM website and look up a package, you can't actually see the code that you're about to install at all. You basically resort to clicking the GitHub link and then going to GitHub and looking at the code there to get an idea. And so one of the things we'd like to be able to do is to sort of say, well, whenever we see that the code on GitHub doesn't match the code that's on NPM, that's a pretty big red flag, right?
00:00
Transcript
Play full episode
Remember Everything You Learn from Podcasts
Save insights instantly, chat with episodes, and build lasting knowledge - all powered by AI.