My first time at JSConf Budapest, how was it?
Sharing my thoughts and experience on attending JSConf Budapest for the first time
The Blog
-
-
npm security tips to keep you safe of malicious modules
npm security tips to keep you safe of malicious modules
-
6 stages of refactoring a jest test case
what makes a test case good? how can we improve the developer friendliness when writing test code?
-
npm passes the 1 millionth package milestone! What can we learn?
June 4th is a historic date where the millionth package was indexed into the npm registry. npm is a package manager for JavaScript packages.
-
Are you building Docker images? here's how to avoid leaking sensitive information into Docker images
Sometimes, when building an application inside a Docker image, you need secrets such as an SSH private key to pull code from a private repository but you may be going about it the wrong way by leaking secrets into the image. Here is how to avoid it.
-
Why you should use COPY instead of ADD when building Docker images
Docker provides two commands for copying files from the host to the Docker image when building it: `COPY` and `ADD`. which one should you use?
-
How to securely build Docker images for Node.js
When a Dockerfile doesn't specify a USER directive, what's the worst that can happen?
-
Did you hear about the malicious backdoor discovered in the popular bootstrap-sass Ruby gem?
a malicious version of a Ruby gem used in a Rails application leads to remote code execution on vulnerable servers
-
A Comprehensive Guide to Contract Testing APIs in a Service Oriented Architecture
It is likely you experienced the painful situation of deploying to production only to find out that an API service you integrate with has…
-
Assess your npm project health and call the doctor!
npm project health assessment
-
So you think you're just gonna `npm install`? Think again
installing dependencies is not the same for development as it is for continuous integration systems, in this post I share why.
-
How to avoid leaking secrets to the npm registry
10 awesome npm security tips to keep you safe!
-
The State of — JSHeroes — 2019
The JSHeroes conference will take place this year in April and bring in people from all over the world to connect with new and old friends…
-
Node.js Security WG — January 2019
In an effort to better promote and increase engagement in the Node.js Security WG we would like to share highlights more often, ideally…
-
A Snyk’s Post-Mortem of the Malicious event-stream npm package backdoor
Last week the imaginable happened. A malicious package, flatmap-stream, was published to npm and was later added as a dependency to the…
-
Fighting npm typosquatting attacks and naming rules for npm modules
I guess naming is a hard task in general, and for the npm registry, the naming rules have evolved from what they were to begin with, much…
-
Demystifying Jest Async Testing Patterns
There are several traps that are easy to fall to when it comes to async testing. Moreover, there are several methods of achieving the same…
-
Malicious Modules — what you need to know when installing npm packages
What if someone was able to directly publish a new vulnerable React version?
-
What would you focus on when hiring engineering vp for a team of 10?
Let's assume you are tasked with hiring a VP Engineering for a relatively small team, say 10 engineers, which is on a growth trend as the company gets bigger.
-
Reasons to Love Jest: The Developer Experience
Oh yes. The Developer Experience with Jest is transforming the act of writing tests from a chore to hell of a fun time, promise! 🤓
-
Reasons to Love Jest: The Test Framework
We had Tape, Mocha, Ava, and now Jest. Let’s see what this is all about!
-
Meet the Node.js Security Working Group
In this post I would like to acquaint you with the work being done by the Node.js Security Working Group (WG) and how we’re improving the…
-
How a RegEx can bring your Node.js service down
The use of Regular Expressions (RegEx) is quite common among software engineers and DevOps or IT roles where they specify a string pattern…
-
A suggested approach for your next project: RDD — README Driven Development
Side projects are an amazing thing.We learn, experiment, and collaborate with the world through them.
-
Setting the platform with your team — A Manager’s README
A crucial part of being an engineering manager is on-boarding to a new team, or on-boarding others to yours. The important bits there is…