GitHub’s commitment to npm ecosystem security
We’re sharing details of recent incidents on the npm registry, our investigations, and how we’re continuing to invest in the security of npm.
The vast majority of businesses today rely on open source, making it an essential part of the software industry. And millions of those projects are on GitHub. Learn about documentation, maintainers, gaming Git, licenses, and how open source positively impacts the world. You can also find information in our documentation about how to build and foster sustainable open source communities.
We’re sharing details of recent incidents on the npm registry, our investigations, and how we’re continuing to invest in the security of npm.
To celebrate this most recent release, here’s GitHub’s look at some of the most interesting features and changes introduced since last time.
What an incredible month it’s been for GitHub and our communities. Whilst we’ve been busy with GitHub Universe, our communities have been busy coding. It’s been a successful year for…
The new sparse index feature makes it feel like you are working in a small repository when working in a focused portion of a monorepo.
When you’re fixing a bug, especially a security vulnerability, you should add a regression test, fix the bug, and find & fix variants.
The theme for this year’s Game Off is… …BUG! Your challenge, should you choose to accept it, is to create a game between now and December 1 incorporating the theme…
We’re excited to highlight another top contributing researcher to GitHub’s Bug Bounty Program: @yvvdwf
Maintainers can now limit who can approve and request changes on pull requests. You can also close issues and block users via your phone.
It’s that time of year again where I like to share seasonally spooktacular games plus source code—a goldmine of material for (a) those looking for coffee-break entertainment, (b) those interested…
The 49th Ludum Dare game jam just wrapped up with almost 3000 entries. Here’s a peek at some of the highest-rated entries that you can play, plus their source code…
Game Off is an annual game jam (or “hackathon for building games”) that’s a little different from most—it lasts for the entire month of November—not just a weekend or a…
The Northern Hemisphere has hit fall, and the southern is starting to warm into summer. September has been a busy time for our community. Maintainers have been getting their repositories…
Giving back to open source projects is a great way to practice skills you don’t get to use in your day job. Check out ways to get involved!
If you think about it, 13kB isn’t really a lot. The image above is 81kB. This page weighs over 3MB (waaay more if you include the videos). That’s why it’s…
In August of 2020, we started highlighting stories that showcase how developers, maintainers, and organizations are moving humanity forward through The ReadME Project.
Build what’s next on GitHub, the place for anyone from anywhere to build anything.
Get tickets to the 10th anniversary of our global developer event on AI, DevEx, and security.