AI-powered
podcast player
Listen to all your favourite podcasts with AI-powered features
28min chapter
Feross Aboukhadijeh - Socket
devtools.fm: Developer Tools, Open Source, Software Development
The Risks of Relying on Code and Package Maintainers
This chapter explores the potential risks of relying on code and package maintainers in open source projects. It highlights cases where even trusted maintainers have made mistakes or intentionally sabotaged their own projects. The limitations of code signing as a solution and examples of malicious code found in popular packages on NPM are also discussed.
00:00
Transcript
Episode notes
Get the Snipd
podcast app
Unlock the knowledge in podcasts with the podcast player of the future.
AI-powered
Discover
highlights
Listen to the best highlights from the podcasts you love and dive into the full episode
Save any
moment
Hear something you like? Tap your headphones to save it with AI-generated key takeaways
Share
& Export
Send highlights to Twitter, WhatsApp or export them to Notion, Readwise & more
AI-powered
podcast player
Listen to all your favourite podcasts with AI-powered features
Discover
highlights
Listen to the best highlights from the podcasts you love and dive into the full episode