2025-07-27 UTC
# 
[social] My last job one of the internal products I ran and owned was a service that scanned and assessed every FOSS package requested that came in to the company. There were 40k to 60k internal devs and engineers in a very risk adverse industry. It was amazing transversing all the nested packages, particularly in npm, with how many with serious vulnerabilities were relied upon downstream.