Risks in your supply chain

In this talk, we analyze supply chain risks in NPM and Python package managers and how deep and pervasive the problem goes. We focus on real data and analysis to show how much risk even trivial apps pull in through transitive dependencies.