Talks · Software supply chain · 2020
Trick or Treat, Hello Dependency Defeat
Recorded at Community Summit TLV , Dec 2020
The topic
Malicious npm packages, typosquatting, lockfile injection and the state of open source security, told through real incidents.
Where it's been given, and where it's next
1 delivered.
