Dependency attacks in 2026 with James Matchett

Mon, 05 Oct 2026 00:00:00 +0000

Josh chats with Jeff Matchett from Cloudsmith about a new report they put out. It has some scary looking statistics in it about how organizations are using dependencies. There are some surprising numbers in there, but the story is really one of defense in depth. There’s no single thing we can do here, it’s all about knowing what you have every step of the way. It’s easy to say, but certainly a challenge to do right. James is a ton of fun to chat with and filled with energy and knowledge.

Cloudsmith on Open Source Security

Dependency attacks in 2026 with James Matchett