Skip to content
Search Create account

DEV Community

DEV Community is a community of 851,150 amazing developers

We're a place where coders share, stay up-to-date and grow their careers.

Create account Log in
Twitter Facebook Github Instagram Twitch
Andreas Sommarström profile picture

Andreas Sommarström

Developer Relations for https://bytesafe.dev. Always aiming to make life less complex.

Location Stockholm, Sweden Joined Joined on  twitter website

Work

Developer Relations at Bytesafe

How to use a secure private NuGet source in Visual Studio or JetBrains Rider
sumstrm profile

How to use a secure private NuGet source in Visual Studio or JetBrains Rider

#dotnet #security #tutorial #productivity
Reactions 16 Comments 1
5 min read

Recent comments

How to use a secure private NuGet source in Visual Studio or JetBrains Rider

Interested in Java and Maven repositories, see my previous po...

What computer do you use for software develpment?

For work: Macbook Pro (2018 version if I recall correctly). M...

Update dependencies safely - with a delay on newly published versions

The colors.js/faker.js incident with the maintainer intention...

Breaking of two NPM libraries show that everything isn't right in FOSS ecosystem

Interesting write up! The whole discussion after colors.js/fa...

Update dependencies safely - with a delay on newly published versions

Want to share your thoughts on how to best make sure dependen...

Steering clear of the dependency trap

Same pattern and same problem with malicious versions of coa ...

Steering clear of the dependency trap

Want to dig a little deeper into control over the dependencie...

Block npm package threats using a dependency firewall

The flow with Issue detection -> Automatic quarantine (if ...

View all 14 comments
Time for secure dependencies? Private Maven repository for Java, Kotlin, Scala
sumstrm profile

Time for secure dependencies? Private Maven repository for Java, Kotlin, Scala

#java #kotlin #maven #gradle
Reactions 14 Comments
5 min read
Update dependencies safely - with a delay on newly published versions
sumstrm profile

Update dependencies safely - with a delay on newly published versions

#security #java #webdev #javascript
Reactions 9 Comments 2
3 min read
Steering clear of the dependency trap
sumstrm profile

Steering clear of the dependency trap

#javascript #node #security #webdev
Reactions 37 Comments 2
5 min read
Open source is a valuable development resource. Give it your attention
sumstrm profile

Open source is a valuable development resource. Give it your attention

#javascript #security #node #devops
Reactions 11 Comments
3 min read
Automatic protection from dependency confusion
sumstrm profile

Automatic protection from dependency confusion

#npm #security #javascript #node
Reactions 11 Comments
4 min read
Different typosquatting attacks to know of - for a secure supply chain
sumstrm profile

Different typosquatting attacks to know of - for a secure supply chain

#security #node #npm #javascript
Reactions 12 Comments
5 min read
Why you should host public npm packages in a private registry
sumstrm profile

Why you should host public npm packages in a private registry

#npm #node #javascript #security
Reactions 12 Comments
4 min read
Understanding open source licenses - What is Copyleft?
sumstrm profile

Understanding open source licenses - What is Copyleft?

#opensource #webdev #node #npm
Reactions 8 Comments 1
6 min read
Control your npm packages & avoid dependency confusion
sumstrm profile

Control your npm packages & avoid dependency confusion

#npm #node #javascript #security
Reactions 24 Comments 1
4 min read
Using private npm packages with GitHub Actions
sumstrm profile

Using private npm packages with GitHub Actions

#github #npm #webdev #tutorial
Reactions 7 Comments
5 min read
Installing unpublished npm modules from Git repos
sumstrm profile

Installing unpublished npm modules from Git repos

#npm #git #javascript #github
Reactions 12 Comments
3 min read
How do you approach adding new npm dependencies to a project?
sumstrm profile

How do you approach adding new npm dependencies to a project?

#discuss #npm #javascript #security
Reactions 9 Comments 4
1 min read
npm security issues to know of in 2021
sumstrm profile

npm security issues to know of in 2021

#security #npm #node #webdev
Reactions 26 Comments
4 min read
Consistent tests and builds by freezing npm registry states
sumstrm profile

Consistent tests and builds by freezing npm registry states

#javascript #npm #testing #devops
Reactions 9 Comments
7 min read
loading...