Securing the open source supply chain (Changelog Interviews #482)

Securing the open source supply chain (Change...

Up next

Canary tokens and digital tripwires (Changelog Interviews #683)

Haroon Meer is back! Haroon is the Founder of Thinkst, the ~50-person bootstrapped company behind Canary and Canarytokens — honeypots and tripwires you sprinkle inside your network and forget about until an attacker touches one. We talk about the AWS API key token attackers just ...  Show more

From open source hits to OpenAI (Changelog Interviews #682)

This week I'm talking with Max Stoiber, currently working on ChatGPT's plugin directory and app platform at OpenAI. We discuss the hundreds of open source projects nobody remembers alongside the big ones like react-boilerplate and styled-components, how Spectrum became part of Gi ...  Show more

Recommended Episodes

What's in your package.json?
JS Party: JavaScript, CSS, Web Development

Tobie Langel, Open source strategist and Principal at UnlockOpen, joins Chris, Feross, and Amal to discuss recent widespread incidents affecting the JavaScript community (and breaking CI builds) around the globe. Two widely used npm libraries were self-sabotaged by their single m ...  Show more

ANTHOLOGY — Packages, pledges & protocols (Interview)
The Changelog: Software Development, Open Source

The hallway track at All Things Open 2024 — features Carl George, Principal Software Engineer at Red Hat for a discussion on the state of open source enterprise linux and RHEL (Red Hat Enterprise Linux), Max Howell, creator of Homebrew and tea.xyz which offers rewards and recogni ...  Show more

Yet another open source rug pull (News)
The Changelog: Software Development, Open Source

A popular open source iOS authenticator app goes rogue under new ownership, Andreas Kling steps back from SerenityOS & forks Ladybird, Vhyrro takes a thought-provoking try at a "static effect system", Matt Bessey is over GraphQL & Marc-Andre Giroux still likes GraphQL sometimes ( ...  Show more

First-time contributors and maintainer balance (Interview)
The Changelog: Software Development, Open Source

Kent C. Dodds joined the show to talk about guiding and supporting first time contributors to open source. We talked about the many ways to be first-timer friendly, how to contribute to open source, the burden and balance of a maintainer, and a few of the projects Kent maintains, ...  Show more