Discussions
-
NPM packages were compromised or why it's essential to have locked versions.
Several days ago, Josh Junon, posted a message on his bsky feed that he had been hacked. To be more precise, most of the packages that he is maintaining were compromised via a supply chain attack. As a result, series packages are being pushed to npm, which appear to contain malicious code. Feel free to ask questions in…
-
Best practices for managing technical debt in Jira separate project or integrated approach?
Hey everyone, Our development team is struggling with how to properly track and prioritize technical debt alongside feature work. We're currently using a single Jira project for everything, but technical debt items often get buried under feature requests and bug fixes. Current approach: * Everything in one project with…
