Changelog Master Feed

Susan Etlinger, an Industry Analyst at Altimeter, a Prophet company, joins us to discuss The AI Maturity Playbook: Five Pillars of Enterprise Success. This playbook covers trends affecting AI, and offers a maturity model that practitioners can use within their own organizations - addressing everything from strategy and product development, to culture and ethics. Join the discussionChangelog++ members support our work, get closer to the metal, and make the ads disappear. Join today!Sponsors:Fastly – Our bandwidth partner. Fastly powers fast, secure, and scalable digital experiences. Move beyond your content delivery network to their powerful edge cloud platform. Learn more at fastly.com. Rollbar – We catch our errors before our users do because of Rollbar. Resolve errors in minutes, and deploy your code with confidence. Learn more at rollbar.com/changelog. Linode – Our cloud server of choice. Deploy a fast, efficient, native SSD cloud server for only $5/month. Get 4 months free using the code changelog2018. Start your server - head to linode.com/changelog Algolia – Our search partner. Algolia’s full suite search APIs enable teams to develop unique search and discovery experiences across all platforms and devices. We’re using Algolia to power our site search here at Changelog.com. Get started for free and learn more at algolia.com. Featuring:Susan Etlinger – XChris Benson – Website, GitHub, LinkedIn, XDaniel Whitenack – Website, GitHub, XShow Notes: Machine Learning for fair decisions Bias examples - programmer, black male Increasing Trust in AI Services through Supplier’s Declarations of Conformity Introducing AI Fairness 360 The AI Maturity Playbook: Five Pillars of Enterprise Success AI Now - Algorithmic Impact Assessments: A Practical Framework for Public Agency Accountability Amazon’s Facial Recognition Wrongly Identifies 28 Lawmakers, A.C.L.U. Says General Data Protection Regulation Something missing or broken? PRs welcome!

KBall, Chris, Nick, and Safia discuss how they keep a healthy relationship with dependencies in their codebase. Listen to learn how they decide when to use third-party dependencies, how they verify and validate dependencies, and how to support the ecosystem of open source libraries. Join the discussionChangelog++ members support our work, get closer to the metal, and make the ads disappear. Join today!Sponsors:Gauge – Low maintenance test automation! Gauge is free and open source test automation framework that takes the pain out of acceptance testing. Rollbar – We catch our errors before our users do because of Rollbar. Resolve errors in minutes, and deploy your code with confidence. Learn more at rollbar.com/changelog. DigitalOcean – DigitalOcean is simplicity at scale. Whether your business is running one virtual machine or ten thousand, DigitalOcean gets out of your way so your team can build, deploy, and scale faster and more efficiently. New accounts get $100 in credit to use in your first 60 days. Fastly – Our bandwidth partner. Fastly powers fast, secure, and scalable digital experiences. Move beyond your content delivery network to their powerful edge cloud platform. Learn more at fastly.com. Featuring:Safia Abdalla – Website, GitHub, XKevin Ball – Website, GitHub, LinkedIn, XChristopher Hiller – Website, GitHub, Mastodon, XNick Nisi – Website, GitHub, Bluesky, Mastodon, XShow Notes: FOSSA is an open source dependency management tool. This package will analyze the licenses of the node.js modules in your project. Tidelift is a way for software teams to support open source projects. Something missing or broken? PRs welcome!

Jerod is joined by Andrew Nesbitt and Ben Nickolls to talk Octobox, their open source web app that helps you manage your GitHub notifications. They discuss how Octobox came to be, why open source maintainers love it, the experiments they’re doing with pricing and business models, and how Octobox can continue to thrive despite GitHub’s renewed interest in improving notifications. Join the discussionChangelog++ members support our work, get closer to the metal, and make the ads disappear. Join today!Sponsors:Rollbar – We catch our errors before our users do because of Rollbar. Resolve errors in minutes, and deploy your code with confidence. Learn more at rollbar.com/changelog. Linode – Our cloud server of choice. Deploy a fast, efficient, native SSD cloud server for only $5/month. Get 4 months free using the code changelog2018. Start your server - head to linode.com/changelog GoCD – GoCD is an on-premise open source continuous delivery server created by ThoughtWorks that lets you automate and streamline your build-test-release cycle for reliable, continuous delivery of your product. Command Line Heroes – A new podcast about the epic true tales of the developers, hackers, and open source rebels revolutionizing the tech landscape from the command line up. Presented by Red Hat. Featuring:Andrew Nesbitt – Website, GitHub, XBenjamin Nickolls – GitHub, XJerod Santo – GitHub, LinkedIn, Mastodon, XShow Notes: Andrew was a guest on The Changelog #188 and Request For Commits #3 The two met at a 24 Pull Requests event They’ve been working on Libraries.io for the last couple of years When it comes to clipboard managers, Andrew recommends Alfred For all things Octobox, start right here Or jump straight to its GitHub repo Find Octobox on GitHub Marketplace Or support the community on Open Collective Their Roadmap is also open source Something missing or broken? PRs welcome!

Fully Connected – a series where Chris and Daniel keep you up to date with everything that’s happening in the AI community. This week we discuss all things inference, which involves utilizing an already trained AI model and integrating it into the software stack. First, we focus on some new hardware from Amazon for inference and NVIDIA’s open sourcing of TensorRT for GPU-optimized inference. Then we talk about performing inference at the edge and in the browser with things like the recently announced ONNX JS. Join the discussionChangelog++ members support our work, get closer to the metal, and make the ads disappear. Join today!Sponsors:DigitalOcean – DigitalOcean is simplicity at scale. Whether your business is running one virtual machine or ten thousand, DigitalOcean gets out of your way so your team can build, deploy, and scale faster and more efficiently. New accounts get $100 in credit to use in your first 60 days. Fastly – Our bandwidth partner. Fastly powers fast, secure, and scalable digital experiences. Move beyond your content delivery network to their powerful edge cloud platform. Learn more at fastly.com. Rollbar – We catch our errors before our users do because of Rollbar. Resolve errors in minutes, and deploy your code with confidence. Learn more at rollbar.com/changelog. Linode – Our cloud server of choice. Deploy a fast, efficient, native SSD cloud server for only $5/month. Get 4 months free using the code changelog2018. Start your server - head to linode.com/changelog Featuring:Chris Benson – Website, GitHub, LinkedIn, XDaniel Whitenack – Website, GitHub, XShow Notes:News: NVIDIA’s open sourcing of TensorRT Amazon launches a machine learning chip The recently announced ONNX JS project Snapdragon Neural Processing Engine SDK Learning resources: Rise of the model servers TensorRT server tutorial ONNX JS on GitHub TensorFlow JS tutorials Something missing or broken? PRs welcome!

In this special episode of JS Party, KBall and Nick are on location at Node + JS Interactive in Vancouver. They talks with Laurie Voss, co-founder and COO of npm Inc. They chat about his talk, “npm and the Future of JavaScript”, JavaScript frameworks, and how the definition of “the fundamentals of the web” is constantly changing. Join the discussionChangelog++ members support our work, get closer to the metal, and make the ads disappear. Join today!Sponsors:Gauge – Low maintenance test automation! Gauge is free and open source test automation framework that takes the pain out of acceptance testing. Rollbar – We catch our errors before our users do because of Rollbar. Resolve errors in minutes, and deploy your code with confidence. Learn more at rollbar.com/changelog. DigitalOcean – DigitalOcean is simplicity at scale. Whether your business is running one virtual machine or ten thousand, DigitalOcean gets out of your way so your team can build, deploy, and scale faster and more efficiently. New accounts get $100 in credit to use in your first 60 days. Algolia – Our search partner. Algolia’s full suite search APIs enable teams to develop unique search and discovery experiences across all platforms and devices. We’re using Algolia to power our site search here at Changelog.com. Get started for free and learn more at algolia.com. Featuring:Laurie Voss – Website, GitHub, XKevin Ball – Website, GitHub, LinkedIn, XNick Nisi – Website, GitHub, Bluesky, Mastodon, XShow Notes:Laurie’s Talk: npm and the Future of JavaScript slides npm and the Future of JavaScript recording from NEJS Methodology of Survey blog post React Everywhere React Native React Desktop React Router Other References CommonJS WASM Backbone Gutenberg Yarn Something missing or broken? PRs welcome!

Jeremy Fuksa has had a rough few years. After deciding to go out on his own, his third year in business was filled with anxiety. Going back to working a full-time job may sound like a failure to some, but Jeremy doesn’t look at it that way. He talks to me about his unique skill set, dealing with anxiety and depression, and how his recent experience has taught him some great lessons. Join the discussionChangelog++ members support our work, get closer to the metal, and make the ads disappear. Join today!Sponsors:Linode – Our cloud server of choice. Deploy a fast, efficient, native SSD cloud server for only $5/month. Get 4 months free using the code changelog2018. Start your server - head to linode.com/changelog Rollbar – We catch our errors before our users do because of Rollbar. Resolve errors in minutes, and deploy your code with confidence. Learn more at rollbar.com/changelog. Fastly – Our bandwidth partner. Fastly powers fast, secure, and scalable digital experiences. Move beyond your content delivery network to their powerful edge cloud platform. Learn more at fastly.com. Algolia – Our search partner. Algolia’s full suite search APIs enable teams to develop unique search and discovery experiences across all platforms and devices. We’re using Algolia to power our site search here at Changelog.com. Get started for free and learn more at algolia.com. Featuring:Jeremy Fuksa – Website, XTim Smith – GitHub, XShow Notes: Listen to Jeremy and Paul’s podcast, Uncle Weepy’s Depression Dungeon If you or someone you know would be a great guest for this show, send an email to afk@changelog.com Something missing or broken? PRs welcome!

Adam and Jerod talk with Dominic Tarr, creator of event-stream, the IO library that made recent news as the latest malicious package in the npm registry. event-stream was turned malware, designed to target a very specific development environment and harvest account details and private keys from Bitcoin accounts. They talk through Dominic’s backstory as a prolific contributor to open source, his stance on this package, his work in open source, the sequence of events around the hack, how we can and should handle maintainer-ship of open source infrastructure over the full life-cycle of the code’s usefulness, and what some best practices are for moving forward from this kind of attack. Join the discussionChangelog++ members support our work, get closer to the metal, and make the ads disappear. Join today!Sponsors:Rollbar – We catch our errors before our users do because of Rollbar. Resolve errors in minutes, and deploy your code with confidence. Learn more at rollbar.com/changelog. Linode – Our cloud server of choice. Deploy a fast, efficient, native SSD cloud server for only $5/month. Get 4 months free using the code changelog2018. Start your server - head to linode.com/changelog GoCD – GoCD is an on-premise open source continuous delivery server created by ThoughtWorks that lets you automate and streamline your build-test-release cycle for reliable, continuous delivery of your product. Command Line Heroes – A new podcast about the epic true tales of the developers, hackers, and open source rebels revolutionizing the tech landscape from the command line up. Presented by Red Hat. Featuring:Dominic Tarr – Website, GitHub, XAdam Stacoviak – Website, GitHub, LinkedIn, Mastodon, XJerod Santo – GitHub, LinkedIn, Mastodon, XShow Notes: The issue that kicked off everything We covered the incident on Changelog News Here’s Dominic’s statement that we reference repeatedly Felix Krause had some on-point commentary on Twitter TideLift says event-stream gets 2 million downloads per week SwiftOnSecurity also chimed in on Twitter Learn more about Project Xanadu We discussed Reproducible Builds with Chris Lamb back in the day Also check out A call for kindness in open source with Brett Cannon Something missing or broken? PRs welcome!

Joe Doliner (JD) joined the show to talk about productionizing ML/AI with Pachyderm, an open source data science platform built on Kubernetes (k8s). We talked through the origins of Pachyderm, challenges associated with creating infrastructure for machine learning, and data and model versioning/provenance. He also walked us through a process for going from a Jupyter notebook to a production data pipeline. Join the discussionChangelog++ members support our work, get closer to the metal, and make the ads disappear. Join today!Sponsors:DigitalOcean – DigitalOcean is simplicity at scale. Whether your business is running one virtual machine or ten thousand, DigitalOcean gets out of your way so your team can build, deploy, and scale faster and more efficiently. New accounts get $100 in credit to use in your first 60 days. Fastly – Our bandwidth partner. Fastly powers fast, secure, and scalable digital experiences. Move beyond your content delivery network to their powerful edge cloud platform. Learn more at fastly.com. Rollbar – We catch our errors before our users do because of Rollbar. Resolve errors in minutes, and deploy your code with confidence. Learn more at rollbar.com/changelog. Linode – Our cloud server of choice. Deploy a fast, efficient, native SSD cloud server for only $5/month. Get 4 months free using the code changelog2018. Start your server - head to linode.com/changelog Featuring:Joe Doliner – Website, GitHub, XChris Benson – Website, GitHub, LinkedIn, XDaniel Whitenack – Website, GitHub, XShow Notes: Pachyderm Pachyderm on GitHub Pachyderm tutorials DoD challenge built using Pachyderm Something missing or broken? PRs welcome!

Kyle Mathews is the founder and CEO of Gatsby, a new company he’s building around an open source project of the same name. Gatsby as a project describes itself as a flexible modern website framework and blazing fast static site generator for React.js. At the macro level — Kyle’s career has been focused on a better way to build and ship websites. It seems he’s done just that with Gatsby’s launch in late May 2015…since then he’s taken on a co-founder and a seed round of $3.8M to form Gatsby Inc. Join the discussionChangelog++ members support our work, get closer to the metal, and make the ads disappear. Join today!Sponsors:Linode – Our cloud server of choice. Deploy a fast, efficient, native SSD cloud server for only $5/month. Get 4 months free using the code changelog2018. Start your server - head to linode.com/changelog Rollbar – We catch our errors before our users do because of Rollbar. Resolve errors in minutes, and deploy your code with confidence. Learn more at rollbar.com/changelog. Fastly – Our bandwidth partner. Fastly powers fast, secure, and scalable digital experiences. Move beyond your content delivery network to their powerful edge cloud platform. Learn more at fastly.com. Featuring:Kyle Mathews – Website, GitHub, XAdam Stacoviak – Website, GitHub, LinkedIn, Mastodon, XShow Notes: GatsbyJS Gastby Inc. Announcing new Gatsby Company Announcing Gatsby Preview Something missing or broken? PRs welcome!

KBall, Jerod, and Nick break down some recent events in the JavaScript world. Take a dive into the recent event-stream malware attack, breaking down the State of JavaScript 2018 survey, and sharing pro tips to make your life better. Join the discussionChangelog++ members support our work, get closer to the metal, and make the ads disappear. Join today!Sponsors:Gauge – Low maintenance test automation! Gauge is free and open source test automation framework that takes the pain out of acceptance testing. Rollbar – We catch our errors before our users do because of Rollbar. Resolve errors in minutes, and deploy your code with confidence. Learn more at rollbar.com/changelog. DigitalOcean – DigitalOcean is simplicity at scale. Whether your business is running one virtual machine or ten thousand, DigitalOcean gets out of your way so your team can build, deploy, and scale faster and more efficiently. New accounts get $100 in credit to use in your first 60 days. Featuring:Kevin Ball – Website, GitHub, LinkedIn, XNick Nisi – Website, GitHub, Bluesky, Mastodon, XJerod Santo – GitHub, LinkedIn, Mastodon, XShow Notes:The event-stream incident FallingSnow’s initial issue that made it public npm yanked the package and reported on the attack Listen to Dominic Tarr discuss it on The Changelog (broken link until 2018-12-5) Could this be a copy-cat of this Hackernoon article from earlier this year? The State of JS survey Check out the survey (and rad website) right here KBall recommends Mel Summer’s talk from EmberFest 2018 Pro Tips Jerod cites Eugen Kiss’s Lean Testing post (More commentary here) Nick recommends some handy git aliases from Cory Frang KBall’s tip is a .clone() of Nick’s debugging trip from episode 46 Never forgot to trust.js but verify. 😉 Something missing or broken? PRs welcome!