Jamie Magee

jamiemagee.co.uk

You’re about to ship a product. Legal asks for the third-party notices, so you generate an SBOM, and half the dependencies come back as NOASSERTION . You can’t put that in a NOTICE file, and legal won’t sign off on it. I’ve spent a lot of late nights writing those files by hand, so this is the talk I gave about the…

Popular posts: 1
Total points: 147
HN comments: 67
Rank: #16,193 personal

Visit jamiemagee.co.uk → RSS feedOn Hacker News Oct 2023 – Oct 2023

Software Engineering 1 Infrastructure & DevOps 1

Most points Most discussed Most cited Newest

Honey, I shrunk the NPM package

2023147 points67 comments Software Engineering details

Have you ever wondered what lies beneath the surface of an npm package? At its heart, it’s nothing more than a gzipped tarball. Working in software development, source code and binary artifacts are nearly always shipped as .tar.gz or .tgz files. And gzip compression is supported by every HTTP server and web browser…