5 ms·
And some people might feel all of that is not GitHub's job. Maybe because they like the tools that are familiar to their technology stack, for better or worse.
by sverhagen 6y ago
And some people might feel all of that is not GitHub's job. Maybe because they like the tools that are familiar to their technology stack, for better or worse. And maybe GitHub doesn't feel like stepping into that minefield?
- underwater 6y agoGithub own npm. They're absolutely the right company to do this.
- jollofricepeas 6y agoI disagree completely. They have already stepped their foot into application security in a big way. See: https://github.com/features/security https://github.com/features/security With a little bit more concentrated effort, they could take major market share from Veracode, Synopsys and every other appsec outfit for lunch.
- alokshukla 6y agoJust because you are the core infra provider, does not automatically position you to provide the best security. AWS does not provides the best web or network firewalls, microsoft never had the best AV, so forth and so on. If security is not your core mission, it is always hard to create a fundamentally good offering. That is at least the less of history of such companies. May be Github surprises, but that is what it is.