The Unexpected Demise of Open Source Libraries
summary
Stories of real breakage and fixes: a tiny utility left-pad (11 lines, 2.5M downloads) gets unpublished and breaks thousands of builds; a maintainer publishes faker.js 6.6.6 that nullifies code while faker PHP accrues ~120M downloads before being archived for a claimed 11 metric tons CO2; colors 1.4.1 injects an infinite loop and impacts projects with ~100M downloads. Practical mitigations shown: use lockfiles, overrides, local registries like verdaccio, and community forks that restore functionality.
AI-written summary · about
chapters (6)
- 0:00Start
- 6:25Fallacies in Software Development
- 20:37Open Source Dependencies
- 30:54Colors Incident Learnings
- 34:01The fairy tail ending..
- 35:11Open Source Due Diligence
related talks
29mThe Unexpected Demise of Open Source Libraries
32mSOS: Sustainable Open Source
38mRemember When We Broke the Internet?
41mThe Open Source Effect
39mSOS: Sustainable Open Source
49mTrustworthy Open Source: The Consequences of Success
14mWhat can we do to make Open Source more sustainable?
26mTrapped in the Open Source Supply Chain