PyPi repository vulnerable to deleted package hijack, say researchers

CI/CD Tim Anderson -
Security researchers at JFrog report that the PyPi package repository is vulnerable to malware uploaded with the same name as a deleted package, causing...

Microsoft says .NET Aspire is for any app, but deployment can be complex

Development Tim Anderson -
Hands on: Microsoft principal product manager Jon Galloway has said that .NET Aspire, a stack for building distributed applications, can in fact be used...

AWS quietly freezes CodeCommit, Cloud9, SimpleDB and more, customers complain about lack of notice

DevOps Tim Anderson -
AWS appears to be backtracking on its efforts to provide a complete DevOps service to its customers, with the CodeCommit source code repository service now closed to new customers.

React community splitting into full-stack and client-only camps, suggests survey

Development Tim Anderson -
The latest "State of React" survey suggests that while some developers are racing ahead with major recent features like React Server Components, others are...

Executives have more confidence in software supply chain security than their developers

AI/ML Tim Anderson -
A report sponsored by DevOps company JFrog suggests that executives over-estimate the extent to which developers within their organization defend against vulnerable or malicious...

Why Facebook does not use Git – and why most other devs do

Development Tim Anderson -
Facebook internal development started out on Subversion with a Git mirror but switched to Mercurial for source code control, achieving what some who worked...

Devs say many of their hours are wasted, disagree with managers on how to fix the issue

AI/ML Tim Anderson -
Atlassian, maker of developer collaboration tools, has sponsored new research showing that "misalignment between engineers and their leaders is possibly the leading cause of...

Boomi takes aim at zombie APIs with control plane

Development Joe Fay -
Boomi has pledged to help users slash their through hordes of “zombie” APIs by shipping the control plane it teased back in May at...

Daunting downtime stats help put industrial DevOps under spotlight

CI/CD Paul Kunert -
Industrial firms are belatedly adopting DevOps as they get their heads round the fact that industrial code is behind 50 percent of their extremely...

Ladybird web browser now funded by GitHub co-founder, promises ‘no code’ from rivals

DevOps Tim Anderson -
A new US non-profit organization called the Ladybird Browser Initiative has been set up to develop the Ladybird web browser, based on a new...

Django dev survey shows growing use of HTMX, Tailwind CSS, background workers approved

CI/CD Tim Anderson -
A survey of 4,000 Django developers shows strong growth in use of HTMX, Tailwind CSS and GitHub Actions – and that a third of...

FrankenPHP and Caddy: Double performance, claims Caddy creator but only some apps benefit

Containers Tim Anderson -
FrankenPHP, a PHP App server written in Go and built on the Caddy web server, has the potential to double performance and halve the...

Interview: Developers spend too much time ‘not coding’ says Harness CEO

CI/CD Tim Anderson -
Harness CEO and co-founder Jyoti Bansal told DevClass that "developers spend 60 to 70 percent of their time not coding" because of all the things...

AWS combines “building block” blueprints with CodeCatalyst for rapid project creation including DevOps

CI/CD Tim Anderson -
AWS has added Project Development Kit (PDK) blueprints to its CodeCatalyst DevOps tool. Developers can now compose applications from common patterns while also setting...

Atlassian takes another step toward full DevOps automation

Development Tim Anderson -
Atlassian is continuing in its efforts to transform its developer services into a fully fledged DevOps automation platform, integrating BitBucket and Forge to provide...

GitHub autofix progresses to public beta: insecure code corrected with AI, but only for enterprise

AI/ML Tim Anderson -
GitHub code scanning autofix, a service which automatically detects code vulnerabilities and suggests fixes, is now in public preview for those signed up to...




ABOUT US

DevClass is the news and analysis site covering modern software development issues, from the team behind the Continuous Lifecycle, Serverless Computing and MCubed conferences

Contact us: devclass@sitpub.com

FOLLOW US

© Situation Publishing, 2018-2024