Player FM 앱으로 오프라인으로 전환하세요!
Dependencies are dangerous
Manage episode 427019960 series 1024148
Dependencies! We need them, but how do we use them effectively and safely? In this week’s episode Kris is joined by Ian and Johnny to discuss the polyfill.io supply chain attack, the history of dependency management and usage in Go, and the Go Proverb that “a little copying is better than a little dependency”. Of course, we wrap up the episode with some Unpopular Opinions!
Changelog++ members save 5 minutes on this episode because they made the ads disappear. Join today!
Sponsors:
- Speakeasy – Production-ready, Enterprise-resilient, best-in-class SDKs crafted in minutes. Speakeasy takes care of the entire SDK workflow to save you significant time, delivering SDKs to your customers in minutes with just a few clicks! Create your first SDK for free!
Featuring:
- Kris Brandow – Twitter, GitHub
- Johnny Boursiquot – Twitter, GitHub, Website
- Ian Lopshire – Twitter, GitHub
Show Notes:
- Polyfill.io supply chain attack hits 100,000+ websites — all you need to know
- How Go Mitigates Supply Chain Attacks
- Go Proverbs
- A little copying is better than a little dependency
Something missing or broken? PRs welcome!
챕터
1. It's Go Time! (00:00:00)
2. Intro (00:00:44)
3. Polyfill.io (00:01:38)
4. Affecting the Go dev (00:06:03)
5. Sponsor: Speakeasy (00:21:33)
6. Updating dependencies (00:25:13)
7. Red teaming (00:27:51)
8. Unpopular Opinions! (00:41:34)
9. Johnny's unpop (00:41:56)
10. Ian's unpop (00:52:46)
11. Kris' unpop (00:55:58)
12. Outro (01:02:21)
342 에피소드
Manage episode 427019960 series 1024148
Dependencies! We need them, but how do we use them effectively and safely? In this week’s episode Kris is joined by Ian and Johnny to discuss the polyfill.io supply chain attack, the history of dependency management and usage in Go, and the Go Proverb that “a little copying is better than a little dependency”. Of course, we wrap up the episode with some Unpopular Opinions!
Changelog++ members save 5 minutes on this episode because they made the ads disappear. Join today!
Sponsors:
- Speakeasy – Production-ready, Enterprise-resilient, best-in-class SDKs crafted in minutes. Speakeasy takes care of the entire SDK workflow to save you significant time, delivering SDKs to your customers in minutes with just a few clicks! Create your first SDK for free!
Featuring:
- Kris Brandow – Twitter, GitHub
- Johnny Boursiquot – Twitter, GitHub, Website
- Ian Lopshire – Twitter, GitHub
Show Notes:
- Polyfill.io supply chain attack hits 100,000+ websites — all you need to know
- How Go Mitigates Supply Chain Attacks
- Go Proverbs
- A little copying is better than a little dependency
Something missing or broken? PRs welcome!
챕터
1. It's Go Time! (00:00:00)
2. Intro (00:00:44)
3. Polyfill.io (00:01:38)
4. Affecting the Go dev (00:06:03)
5. Sponsor: Speakeasy (00:21:33)
6. Updating dependencies (00:25:13)
7. Red teaming (00:27:51)
8. Unpopular Opinions! (00:41:34)
9. Johnny's unpop (00:41:56)
10. Ian's unpop (00:52:46)
11. Kris' unpop (00:55:58)
12. Outro (01:02:21)
342 에피소드
모든 에피소드
×플레이어 FM에 오신것을 환영합니다!
플레이어 FM은 웹에서 고품질 팟캐스트를 검색하여 지금 바로 즐길 수 있도록 합니다. 최고의 팟캐스트 앱이며 Android, iPhone 및 웹에서도 작동합니다. 장치 간 구독 동기화를 위해 가입하세요.