Supply-Chain Security

Your dependencies are your attack surface: the npm install that owned you, lockfiles, typosquatting, and how to trust code you did not write.

1. Your code is mostly other people's code
2. Pinning, scanning, and seeing what you ship
3. The terrible day, and what stops it