Securing npm is table stakes | Nicholas C. Zakas

Why watch

Nicholas Zakas, creator of ESLint, discusses the security issues plaguing npm and critiques GitHub's inadequate response. He explores why alternative registries like JSR and VLT.sh don't offer sufficient solutions, arguing that securing npm is fundamental infrastructure responsibility. JavaScript/Node.js developers and security professionals will gain insights into the systemic challenges facing the JavaScript package ecosystem.