Security Controls in the JavaScript Supply Chain
watch on portal.gitnation.org ↗https://portal.gitnation.org/contents/security-controls-in-the-javascript-supply-chainsummary
Covers security challenges in the JavaScript ecosystem such as supply chain risks, lock file tampering, arbitrary command execution, blind upgrades, hidden comments in code, and dependency confusion attacks, and emphasizes establishing a threat model for Node applications.
AI-written summary · about
related talks
42mSecuring Your Software Supply Chain
52mBest Practices for Developers to Master Security
58mPractical Secure Development and Operations with JavaScript in 2020
15m“Security” in the JavaScript ecosystem
41mManaging the Risk of Software Supply Chain Attacks
39mSoftware Supply Chain Security
15mSupply chain security for dummies
45mSecurity When Working with npm: Threats, Cases and Stories