npm under siege (what to do about it) (Friends)

单集文稿 ...

• 00:14

  Welcome to changelog and friends, a weekly talk show about exfiltrating CLOD tokens.

• 00:22

  Thank you to our sponsors at fly.io, the public cloud built for developers who like to ship.

• 00:29

  We love Fly.

• 00:30

  You might too.

• 00:31

  Check them out at fly.io.

• 00:33

  Okay, let's talk.

• 00:41

  What's up, friends?

• 00:42

  I'm here with Kyle Galbraith, co-founder and CEO of Depot.

• 00:47

  Depot is the only build platform looking to make your builds as fast as possible.

• 00:52

  But Kyle, this is an issue because GitHub Actions is the number one CI provider out there,

• 00:58

  but not everyone's a fan.

• 00:59

  Explain that.

• 01:00

  I think when you're thinking about GitHub actions,

• 01:03

  it's really quite jarring how you can have such a wildly popular CI provider.

• 01:08

  And yet it's lacking some of the basic functionality or tools that you need to actually be able to debug your builds or deployments.

• 01:16

  And so back in June,

• 01:19

  we essentially took a stab at that problem in particular with Depot's GitHub action runners.

• 01:24

  What we've observed over time is effectively GitHub actions when it comes to like actually debugging a build is pretty much useless.

• 01:32

  The job logs in GitHub Actions UI is pretty much where your dreams go to die.

• 01:37

  Like they're collapsed by default.

• 全部文稿