As part of our ongoing supply-chain security work, npm is introducing automatic scanning of packages at publish time. This changelog covers what publishers can expect and a new metadata requirement…

AI is everywhere and everyone is talking about it, so I thought I would throw my hat in the ring

Looking at secrets managers, this compares Bitwarden to Infisical

🦙 MegaLinter analyzes 48 languages, 22 formats, 19 tooling formats, excessive copy-pastes and spelling mistakes in your repository sources with a GitHub Action, other CI tools or locally.

Lessons learned publishing a Content Security Policy (CSP) for our web apps at InVision.

Things I ponder and think about occasionally

Some learnings and links from my recent expedition into the realm of Universal SSL certificates from Cloudflare

How to use Playwright to smoke test your application to ensure your deployment hasn't broken the site