Top Tweets for #DEPENDENCIES
The conclusion is clear: we are at best maintaining #dependencies and spending lots of money for little reward. #MemberStates must spend together, European and future-oriented—or we miss our goals and waste tons of public money in the process. (5/5)
Alert: Malicious npm packages are stealing cloud and CI/CD secrets from developer systems. Ensure your dependencies are secure. Link: https://t.co/4nXwITdrI8 #Cybersecurity #npm #Malware #Typosquatting #SupplyChain #DevSecOps #Cloud #CICD #Secrets #Developers #Dependencies #Security #Infosec #Packages #Exfiltration #Attack #Risk #Compliance #JavaScript #OpenSource
88 downloads in less than 8hrs, zero promotion.
I built an open source npm package that grades Nigerian food products A–E using WHO AFRO thresholds and NAFDAC regulations. Here's why it exists and what it does: https://t.co/ieEdQNYoQc
#developer #npm #github #dependencies
The additional problem in Europe is that inflation is more likely to take hold in a collective that refuses to reign in social virtue signaling spending
#OOTT
They mocked Trump when he pointed out their #dependencies a decade ago
Whatever objections Europe has to helping open up the Strait of Hormuz, it's a matter of urgent self-interest to help sort this situation out. On a similar time scale to 2022 after Russia invaded Ukraine, European natural gas prices are up more than 2022.
https://t.co/ubyIT4TCLo
Declared dependencies are just the tip of the iceberg. 🧊
Use the @gradle + @github integration to surface hidden transitive vulnerabilities and automate your response. 🛡️
Read more: https://t.co/0ECTUNJg1R
#Gradle #GitHub #Dependabot #dependencies
How Go's Standard Library Streamlines Small App Development by Minimizing Third-Party #Dependencies #golang #dormosheio #standardlibrary #smallapps https://t.co/SEq6gxE246
Wait a minute...🤔
If you don't have to download dependencies on CI all the time, then you can reduce setup wait times by 50% or more!
🐇 #Develocity Universal Cache is here 🐇
https://t.co/vL0aA2aROf
#CI #Dependencies #Setup #Cache #ColdStart
“Rebuilding Europe's #Sovereignty ” !
bravo 👏 @Caffar3Cristina &
@TeddyDowney @TheCapitolForum 👍
Great provocative and dynamic discussions & panels as always
Above all lots of friends and people that want to change the status quo 👌
#trade #China #competition #dependencies
Curtain raiser for my Brussels conference on Wednesday. Note: it’s spicy.
https://t.co/WqKd3Q0sAI
🔗 Supply Chain Alert: 272 extensions depend on vulnerable packages
package dependencies affects 157 extensions
Risk level: MODERATE
Analyzed 157 packages across NPM and PyPI
View affected list #SupplyChainSecurity #Dependencies #SecurityRisk
🔗 Supply Chain Alert: 380 extensions depend on vulnerable packages
lodash-extended affects 254 extensions
Risk level: CRITICAL
Backdoor discovered in popular utility library
Protect your supply chain #SupplyChainSecurity #Dependencies #SecurityRisk
⚠️ Hidden dependencies putting 41% of extensions at risk
Top vulnerable packages:
• lodash-extended (254 extensions)
• moment-timezone (190)
Protect your supply chain #SupplyChainSecurity #Dependencies #SecurityRisk
Our new #UniversalCache platform includes - Artifact Cache! 🏺
Artifact Cache is designed to efficiently store and restore critical build inputs such as #dependencies, toolchains (like #JDK), and build system (eg. #Maven, #Gradle, #npm) artifacts.
Downloading all of these files in one connection—versus many separate downloads over the course of the build—can reduce build times by 20X!! 🦾
(see image)
https://t.co/odns1Z12ix
@SpfAdmin @LtGenHooda #PavithranRajan
"... #India ... aspire for #strategic #autonomy in the #digitalage. They suggest that countries must develop comprehensive maps of their #technological #dependencies and identify #critical #technologies that must be developed #indigenously."
Rethinking Power in the Digital Age
- by Lt. Gen. D.S. Hooda and Lt. Col. Pavithran Rajan
Read: https://t.co/TmiTjVfrwB
In this brief, the authors present a timely and original lens on how #power operates in the 21st Century, with the real contest for global influence playing out in the “#technological substrate.” This substrate operates across four interconnected domains, each representing a crucial dimension of technological power. First, the computation #infrastructure comprising #semiconductors, #fabs, and #data centres; second, the network architecture that enables communication and data flow; third, the information systems and algorithms that organise and process data; fourth, the regulatory controls and standards bodies that control technological development and deployment.
The brief highlights that control over each of these domains is concentrated in the hands of a few players, granting them asymmetric leverage while creating vulnerabilities for dependent states. Understanding the substrate also explains some of the contemporary trends in state behaviour. US #exportcontrols on advanced semiconductors to China, Beijing’s push for a new internet protocol, Russia’s creation of a sovereign #internet, and the centrality of #Nvidia AI chips and the #TikTok algorithm in ongoing US-China trade talks, are all manifestations of power play in the substrate.
A key contribution of this brief for #publicpolicy makers is the articulation of the "technological sovereignty trap" that developing nations face. Forced to adopt foreign technologies, countries find themselves locked into dependencies that can compromise autonomy and constrain policy choices. #Digitaltechnologies often exhibit a winner-takes-all dynamic, and once entrenched, switching to alternatives becomes nearly impossible.
The authors also outline practical pathways for middle powers such as India that aspire for strategic autonomy in the #digitalage. They suggest that countries must develop comprehensive maps of their technological dependencies and identify critical technologies that must be developed indigenously. They must actively participate in the governance of technological standards and explore opportunities for cooperation with other nations to reduce dependence on major powers. There is also a need to raise technological literacy among the policy-making elite, and to craft legal frameworks that ensure leverage over global platforms operating within domestic borders.
Issues that have traditionally been treated as "technical" are today shaping #geopolitical power. This brief emphasises the need for nations to consider shifting attention from the conventional metrics of sovereign power to the technological infrastructure and protocols that shape everyday life and economic security in the post-industrial, technology driven modern era.
🔗 Supply Chain Alert: 373 extensions depend on vulnerable packages
lodash-extended affects 249 extensions
Risk level: CRITICAL
Backdoor discovered in popular utility library
View affected list #SupplyChainSecurity #Dependencies #SecurityRisk
Node-fetch v3 is ESM-only and broke my entire bundler. Ripped it out for native https and my bundle size dropped. Zero dependencies is the new meta. Change my mind. ☕ #javascript #dependencies
Fact: node-fetch v3 is ESM-only and breaks in some Electron bundlers. 💥 I spent today ripping it out and replacing it with Node's native https module. Zero dependencies = fewer headaches. #javascript #dependencies
Your favorite extension might have a backdoor 🚪
1218 extensions use compromised dependencies:
• Compromised NPM package
• Malicious code injection
Potential data exfiltration across thousands of users... #SupplyChainSecurity #Dependencies #SecurityRisk
Your favorite extension might have a backdoor 🚪
1216 extensions use compromised dependencies:
• Compromised NPM package
• Malicious code injection
Potential data exfiltration across thousands of users... #SupplyChainSecurity #Dependencies #SecurityRisk
🔗 Supply Chain Alert: 364 extensions depend on vulnerable packages
lodash-extended affects 243 extensions
Risk level: CRITICAL
Backdoor discovered in popular utility library
View affected list #SupplyChainSecurity #Dependencies #SecurityRisk
Most Popular Users
Elon Musk 
@elonmusk
241.5M followers
Barack Obama
@barackobama
119.1M followers
Cristiano Ronaldo
@cristiano
113.6M followers
Donald J. Trump
@realdonaldtrump
111.8M followers
Narendra Modi
@narendramodi
107.2M followers
Rihanna
@rihanna
98.5M followers
NASA
@nasa
92.4M followers
Justin Bieber
@justinbieber
91.7M followers
KATY PERRY
@katyperry
89.5M followers
Taylor Swift
@taylorswift13
83.4M followers
Lady Gaga
@ladygaga
74.9M followers
Virat Kohli
@imvkohli
72.6M followers
Kim Kardashian
@kimkardashian
70.7M followers
YouTube
@youtube
68.8M followers
Neymar Jr
@neymarjr
65.6M followers
Bill Gates
@billgates
64.9M followers
Selena Gomez
@selenagomez
62.6M followers
The Ellen Show
@theellenshow
62.3M followers
CNN
@cnn
61.8M followers
X
@x
60.8M followers