February 26-28, 2025
Montreal, Canada

Securing the JS Package Ecosystem With Reproducibility

Reproducibility is key to securing the JavaScript package ecosystem. In this talk, discover how `reproduce` will help you to verify a library’s build steps against it's published package counterpart, offering a practical alternative to theoretical SBOM & crypto-provenance security efforts. Learn then how reproducibility democratizes the verification & linking of source to artifacts, enhancing transparency & trust between disparate origins.

View all 191 sessions

Darcy Clarke

vlt

Darcy is the Founder & CEO of vlt technology inc. (a SaaS dev tools platform aimed at the JavaScript ecosystem). He's a serial entrepreneur who has created numerous award-winning products & experiences with a holistic approach to problem solving. He's previously the Co-Founder of Themify (a commercial WordPress co) & lead Open Source at npm Inc. (acquired, 2020) & GitHub. Darcy's work has supported millions of developers & end-users with billions of monthly downloads & impressions worldwide.

Read More