Yellow JackBlog
Notes on supply-chain security and our progress.
- The footprint number we're not going to quote you
We measured Yellow Jack's idle footprint against Nexus and Artifactory on the same laptop. One of the three true ratios is 260×. Here's why we'll quote you the smaller one instead.
- Hello, and what we're building
An introduction to Yellow Jack — a package firewall that inspects open-source packages at the point they're pulled, and what's coming next.