Changelog (@changelog.com)

Recently went on @changelog.com to talk about the wild surge of npm supply chain attacks… and what developers can actually do to stay safe 🔥 We broke down the real, practical steps every team should take: • Lockfiles matter more than people think • Delay new package versions to dodge fresh malware

loading . . .

Feross on the most serious supply chain attacks in npm history (and what we can do about it) YouTube video by Changelog https://www.youtube.com/watch?v=fLtMN-_5Olg