Eve Martin-Jones
where else to find them
no profile links on file
what they talk about
all 4 in the filters
where they keep going back
- Open Source Summit Europe2 editions2023–2025
all 5 in the filters
on a stage with
who talks about the same things
- Josie Anugerah6 talks
- Ashish Bijlani8 talks
- Brian Fox10 talks
- Darcy Clarke11 talks
- Kadi McKean4 talks
- Josh Bressers9 talks
| title | conference | date |
|---|---|---|
| Whoops! I Accidentally Leaked My Credentials (again) | PyCon AU 2026 | 2026-08-26 |
New research presents a working pipeline that ingests artifacts from GitHub, npm, PyPI, Maven and Docker, unpacks releases and unpacks and scans each Docker… | ||
| Trust, but Verify: Proactive Security in Open Source | Open Source Summit Europe 2025 | 2025-08-25 |
Capsoc is an open source CLI that builds Go packages with the Go toolchain, computes call graphs, and reports capability analysis (network, exec, filesystem)… | ||
| Whoops! I Accidentally Leaked My Cloud Keys | Open Source Summit North America 2025 | 2025-06-23 |
A pipeline that scans 6.5 billion files across GitHub, npm, PyPI, Maven, RubyGems and Docker Hub unpacks images layer-by-layer, matches regexes and reports… | ||
| We Need a Standard for Open Source Package Requirements | Open Source Summit North America 2025 | 2025-06-23 |
Argument: current ecosystems lack a common requirement spec, so Deps.dev analyzes millions of packages across npm, Cargo, Maven, PyPI and RubyGems and… | ||
| Picking a Winner: How to Pick the Right Dependency (Resolution... | SupplyChainSecurityCon @ Open Source Summit North America 2024 | 2024-04-16 |
Dependency resolution produces wildly different outcomes: D3 can yield about 10^81 possible graphs even though it lists only 30 direct deps and 2.3 million… | ||
| Dependency Management: The Cause of—and Solution to—All Supply... | SupplyChainSecurityCon @ Open Source Summit North America 2024 | 2024-04-16 |
Dependency graphs contain hundreds to thousands of transitive packages and change rapidly: depths.dev finds up to 25% daily graph churn in npm and PyPI, and… | ||
| Dependency Management: The Cause of—and Solution to—All Supply... | SupplyChainSecurityCon @ Open Source Summit Europe 2023 | 2023-09-19 |
Claims that dependency resolution is NP‑complete, and that Google built deps.dev and reimplemented resolvers (including a 9x9 Sudoku test) to study real… | ||
| Dependency Management: The Cause of—and Solution to—All Supply Chain Problems | Open Source Summit Europe 2023 | 2023-09-19 |
Shows that dependency resolution is NP‑complete, demonstrates resolvers by reimplementing real bugs and even using 9x9 Sudoku as a test case, and delivers… | ||
| nothing matches | ||