Nigel Douglas is Head of Developer Relations at Cloudsmith, the cloud-native artifact management platform trusted by Fortune 500 and Global 2000 engineering teams to secure and distribute software at scale.
Nigel works at the intersection of developer experience and supply chain security, working closely with engineering and security teams to help them understand how modern software supply chains are evolving, and what it takes to keep them secure.
A developer pulls a package from a reliable repo. It is signed, has provenance, and has been scanned. And then…it contains malware. That is no longer hypothetical. When the Miasma worm tore ...