Episode Details

A developer types one command and pulls in 663 packages they've never heard of—each with full system access. We explore the trust paradox at the heart of software dependencies: you're serving code you can't inspect, in a restaurant kitchen you'll never see. From transitive dependency bombs to lifecycle script vulnerabilities, here's how a two-word install command became a security nightmare—and how other fields actually handle trusting things they cannot verify. 00:00:00 - The Restaurant Analogy: Trust without inspection 00:02:15 - Transitive Dependencies: 4.3x amplification per package 00:06:45 - The Scale Problem: 1000+ dependencies in a basic project 00:11:20 - Arbitrary Code Execution: What runs at install time 00:14:50 - How Other Fields Actually Vouched for Unreadable Things --- Sources & further reading: • Russ Cox — "Fifty Years of Open Source Software Supply Chain Security": https://dl.acm.org/doi/10.1145/3762635 • Researchers (multiple) — "How Deep Does Your Dependency Tree Go? An Empirical Study of Dependency Amplification Across 10 Package Ecosystems": https://arxiv.org/html/2512.14739v1 • ENISA — "SBOM Adoption: State of Play 2026": https://www.enisa.europa.eu/publications/sbom-adoption-state-of-play-2026 • Chainguard — "The npm Registry Can't Protect You: The New JavaScript Supply Chain Attacks": https://www.chainguard.dev/supply-chain-security-101/the-npm-registry-cant-protect-you-the-new-javascript-supply-chain-attacks • Snyk — "A Post-Mortem of the Malicious event-stream Backdoor": https://snyk.io/blog/a-post-mortem-of-the-malicious-event-stream-backdoor/ • Sonatype — "npm Libraries colors and faker Sabotaged in Protest by Their Maintainer": https://www.sonatype.com/blog/npm-libraries-colors-and-faker-sabotaged-in-protest-by-their-maintainer-what-to-do-now • Wikipedia contributors — "XZ Utils backdoor": https://en.wikipedia.org/wiki/XZ_Utils_backdoor • Researchers (multiple) — "Wolves in the Repository: A Software Engineering Analysis of the XZ Utils Supply Chain Attack": https://arxiv.org/html/2504.17473v1 • OpenSSF — "Open Infrastructure Is Not Free: A Joint Statement on Sustainable Stewardship": https://openssf.org/blog/2025/09/23/open-infrastructure-is-not-free-a-joint-statement-on-sustainable-stewardship/ • Help Net Security — "Open Source Vulnerability Surge: 2026 Risk Analysis": https://www.helpnetsecurity.com/2026/02/26/open-source-vulnerability-surge-risk-analysis/ • SLSA project — framework documentation: https://slsa.dev/ • Reproducible Builds project — monthly reports: https://reproducible-builds.org/reports/2025-10/ • Dark Reading — "SBOMs in 2026: Some Love, Some Hate, Much Ambivalence": https://www.darkreading.com/application-security/sboms-in-2026-some-love-some-hate-much-ambivalence • Brett Cannon — "How Do You Verify PyPI Can Be Trusted?": https://snarky.ca/how-do-you-verify-pypi-can-be-trusted/ • npm documentation — "Trusted Publishers": https://docs.npmjs.com/trusted-publishers/ • Open Source Funding Survey — "2024 Open Source Software Funding Report": https://opensourcefundingsurvey2024.com/ • InfoQ — "Provenance Tools Becoming Standard": https://www.infoq.com/news/2025/08/provenance/ This podcast episode was fully generated by AI — research, script, voices, and production. Built with Claude, Piper TTS, and automated pipeline tooling.