Changelog

Changelog

@changelog.com

We make podcasts that developers love

1.5K followers2 following518 posts

Changelog reposted

Paul Dix
@pauldix.bsky.social

I recorded this the day before Opus 4.6 and Codex 5.3 got released. I was in the middle of cleaning up an AI slopfest. Since this I’m back to letting AIs write the code, but with a watchful eye and a short leash

Changelog@changelog.com

πŸ₯³ New Changelog interview! changelog.fm/676

changelog.fmChangelog Interviews #676Paul Dix joins us to discuss the InfluxDB co-founder's journey adapting to an agentic world. Paul sent his AI coding agents on various real-world side quests and shares all his findings: what's going to prod, what's not, and why he's (at least for a bit) back to coding by hand.

Changelog reposted

Docker
@docker.com

Making security defaults open source isn’t a small move. Docker EVP of Engineering Tushar Jain joins @changelog.com to unpack the tradeoffs, the technical reality behind hardened images, and what the next wave of container + AI infra really looks like.

Changelog@changelog.com

πŸ™Œ New Changelog interview! changelog.fm/675

changelog.fmChangelog Interviews #675In May of 2025, Docker launched Hardened Images, a secure, minimal, production-ready set of images. In December, they made DHI freely available and open source to everyone who builds software. On this episode, we're joined by Tushar Jain, EVP of Engineering at Docker to learn all about it.

Changelog reposted

Nicholas C. Zakas
@humanwhocodes.com

I was recently on the Changelog podcast to talk about npm's security issues, what can be done, and why the npm registry is unique amongst programming language source code registries.

Changelog@changelog.com

πŸ’₯ New Changelog interview! changelog.fm/674

changelog.fmChangelog Interviews #674As the creator and long-time maintainer of ESLint, Nicholas Zakas is well-positioned to criticize GitHub's recent response to npm's insecurity. He found the response insufficient, and has other ideas on how GitHub could secure npm better. On this episode, Nicholas details these ideas, paints a bleak picture of npm alte...

Changelog reposted

Feross
@feross.bsky.social

Recently went on @changelog.com to talk about the wild surge of npm supply chain attacks… and what developers can actually do to stay safe πŸ”₯ We broke down the real, practical steps every team should take: β€’ Lockfiles matter more than people think β€’ Delay new package versions to dodge fresh malware

youtube.comFeross on the most serious supply chain attacks in npm history (and what we can do about it)YouTube video by Changelog