Feross Aboukhadijeh - Socket.dev, A tool for detecting security vulnerabilities in OSS

Опубликовано: 16 Октябрь 2024
на канале: devtools-fm
471
8

This week we talk to the open source legend Feross Aboukhadijeh about his journey into open source, the challenges of open source funding, and his new company Socket.Socket is a tool that aims to make OSS security level up by providing a way to audit your dependencies for security vulnerabilities.They are able to detect much more complex vulnerabilities than the current tools on the market by using a combination of static analysis, dynamic analysis, and even some LLMs!Come get scared with us as we delve into the world of open source security.

https://feross.org/
https://github.com/feross
  / feross  
  / socketsecurity  
https://socket.dev/

Episode sponsored By Raycast (https://www.raycast.com/)
Become a paid subscriber our patreon, spotify, or apple podcasts for the full episode.

  / devtoolsfm  
https://podcasters.spotify.com/pod/sh...
https://podcasts.apple.com/us/podcast...
https://www.youtube.com/@devtoolsfm/m...