Class Central is learner-supported. When you buy through links on our site, we may earn an affiliate commission.

Linux Foundation

Securing the npm Ecosystem - Enhancing Trust in Open Source

Linux Foundation via YouTube

Start learning Write review
Corporate Finance Institute Ad

Learn Excel and Financial Modeling the Way Finance Teams Actually Use Them

Learn More → DataCamp Ad

Power BI Fundamentals - Create visualizations and dashboards from scratch

Learn More →

Overview

Google, IBM & Meta Certificates – 40% Off
One Coursera Plus subscription covers most Professional Certificates on Coursera.
Unlock All Certificates
This talk surveys GitHub’s work to secure the npm ecosystem, covering account takeover risks and measures such as two-factor authentication, access token controls, and Sigstore.

Syllabus

Intro
Acknowledgements
Abigail introduction
Agenda
Why focus on security
Open Source is built on trust
GitHub is the stewards
Npm is a critical tool
Account Takeovers
What we learned
The plan
Login verification
Adoption update
Improved 2FA experience
Web authen
Better 2FA management
Better 2FA enforcement
Improved account recovery
New releases
granular access token
code explorer
Sigstore
Repository
Wrap up
Thank you

Taught by

Linux Foundation

Tags

Reviews

Start your review of Securing the npm Ecosystem - Enhancing Trust in Open Source

Start learning

Never Stop Learning.

Get personalized course recommendations, track subjects and courses with reminders, and more.

Sign up for free
Someone learning on their laptop while sitting on the floor.