3min chapter

JavaScript Archives - Software Engineering Daily cover image

JavaScript Supply Chain with Feross Aboukhadijeh

JavaScript Archives - Software Engineering Daily

CHAPTER

JavaScript Security - What Makes That Hard?

One of the worst things about NPM right now is that when you go to the NPM website and look up a package, you can't actually see the code that you're about to install at all. You basically resort to clicking the GitHub link and then going to GitHub and looking at the code there to get an idea. And so one of the things we'd like to be able to do is to sort of say, well, whenever we see that the code on GitHub doesn't match the code that's on NPM, that's a pretty big red flag, right?

00:00

Get the Snipd
podcast app

Unlock the knowledge in podcasts with the podcast player of the future.
App store bannerPlay store banner

AI-powered
podcast player

Listen to all your favourite podcasts with AI-powered features

Discover
highlights

Listen to the best highlights from the podcasts you love and dive into the full episode

Save any
moment

Hear something you like? Tap your headphones to save it with AI-generated key takeaways

Share
& Export

Send highlights to Twitter, WhatsApp or export them to Notion, Readwise & more

AI-powered
podcast player

Listen to all your favourite podcasts with AI-powered features

Discover
highlights

Listen to the best highlights from the podcasts you love and dive into the full episode