February 24-26, 2027
Montreal, Canada
Package manager security: from client to central enforcement
Package ecosystems like npm, PyPI, Maven, NuGet and Composer each have controls against software supply chain attacks. We'll compare their capabilities, expose the limits of client-side controls, and show how centralized policies can be enforced at the gate, before they reach the CI/CD pipeline.
We'll cover topics like centralized policy as code, dependency cooldowns, audit trails, OSV rules, and the need for a vendor-neutral artifact firewall.
We'll cover topics like centralized policy as code, dependency cooldowns, audit trails, OSV rules, and the need for a vendor-neutral artifact firewall.
Thijs Feryn
Varnish Software
As the Technical Evangelist at Varnish Software, Thijs Feryn focuses on web performance, software scalability, and content delivery. He demonstrates this through presentations, videos, books and blog posts.
Thijs is a published author and wrote Getting Started with Varnish Cache and Varnish 6 by Example. As a public speaker, he has a track record of over 390 presentations in 26 different countries, where he is often praised for his energetic and engaging presentation style.
