Securing npm is table stakes (Interview)

As the creator and long-time maintainer of ESLint, Nicholas Zakas is well-positioned to criticize GitHub's recent response to npm's insecurity. He found the response insufficient, and has other ideas on how GitHub could secure npm better. On this episode, Nicholas details these ideas, paints a bleak picture of npm alternatives like JSR, and shares our frustration that such a critical piece of internet infrastructure feels neglected.

You can listen to Securing npm is table stakes (Interview) online on Radio and Podcast. Open the player on this page to stream the available audio.

Securing npm is table stakes (Interview) is an episode from The Changelog by Changelog Media.

This episode is 1:21:11 long.

This episode was published on Jan 29, 2026.

Yes. Use the heart button on the episode page to add it to your favorite episodes list.

Yes. This page shows related episodes from The Changelog when more episodes are available from the podcast feed.