The Dark Side of Open Source by Feross Aboukhadijeh
Open source code makes up 90% of most codebases. How do you know if you can trust your open source dependencies? Software supply chain attacks have exploded over the past 12 months and they’re only accelerating in 2024 and beyond. We’ll dive into examples of recent supply chain attacks and what concrete steps you can take to protect your team from this emerging threat.