Cyber Sidekicks: Cloudsmith on Software Supply Chains and “Don’t Make Me Think” Security

Other press articles

Open Source Security Podcast: Dependency attacks in 2026 with James Matchett

Josh chats with James Matchett from Cloudsmith about a new report they put out. It has some scary looking statistics in it about how organizations are using dependencies. There are some surprising numbers in there, but the story is really one of defense in depth. There’s no single thing we can do here, it’s all about knowing what you have every step of the way. It’s easy to say, but certainly a challenge to do right. James is a ton of fun to chat with and filled with energy and knowledge

Keep up to date with our monthly newsletter