# ecosystems

Published articles for ecosystems.

This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles.

## The expanding threat landscape: Chainguard now scans source code for traditional malware and "greyware"

DevFeed: [The expanding threat landscape: Chainguard now scans source code for traditional malware and "greyware"](<https://devfeed.tech/articles/the-expanding-threat-landscape-chainguard-now-scans-source-code-for-traditional-malware-and-greyware-13252.md>)

Original publisher: [Read original article](<https://www.chainguard.dev/unchained/the-expanding-threat-landscape-chainguard-now-scans-source-code-for-traditional-malware-and-greyware>)

Published: 2026-06-09T00:00:00Z

Content type: article

Language: en

Sources: [Chainguard: Unchained](<https://devfeed.tech/sources/chainguard-unchained.md>)

Topics: [chainguard](<https://devfeed.tech/topics/chainguard.md>), [Malware](<https://devfeed.tech/topics/malware.md>), [Code](<https://devfeed.tech/topics/code.md>), [Open Source](<https://devfeed.tech/topics/open-source.md>), [npm](<https://devfeed.tech/topics/npm.md>), [npm packages](<https://devfeed.tech/topics/npm-packages.md>), [Security](<https://devfeed.tech/topics/security.md>)

Tags: [chainguard](<https://devfeed.tech/tags/chainguard.md>), [chainguard-libraries](<https://devfeed.tech/tags/chainguard-libraries.md>), [ecosystems](<https://devfeed.tech/tags/ecosystems.md>), [greyware](<https://devfeed.tech/tags/greyware.md>), [greyware-scanner](<https://devfeed.tech/tags/greyware-scanner.md>), [hardening](<https://devfeed.tech/tags/hardening.md>), [javascript](<https://devfeed.tech/tags/javascript.md>), [malware](<https://devfeed.tech/tags/malware.md>), [malware-prevention](<https://devfeed.tech/tags/malware-prevention.md>), [malware-scanner](<https://devfeed.tech/tags/malware-scanner.md>), [npm](<https://devfeed.tech/tags/npm.md>), [npm-packages](<https://devfeed.tech/tags/npm-packages.md>), [open-source](<https://devfeed.tech/tags/open-source.md>), [packages](<https://devfeed.tech/tags/packages.md>), [scanner](<https://devfeed.tech/tags/scanner.md>), [security](<https://devfeed.tech/tags/security.md>), [source](<https://devfeed.tech/tags/source.md>), [supply-chain-attacks](<https://devfeed.tech/tags/supply-chain-attacks.md>)

### AI overview

Chainguard has introduced a source code scanner that detects traditional malware and "greyware," harmful packages that may perform actions such as credential theft, command interception, API key harvesting, or persistent remote access. The scanner currently protects npm packages, scans more than 100,000 packages daily, and has blocked more than 52,000 packages identified as malware or greyware.

### Source excerpt

Chainguard's new scanner blocks malware and 'greyware' before it reaches developers, protecting 100,000+ packages daily across open source ecosystems.

## Transforming Capital One's Data Marketplace with Embedded Governance and a Product Mindset

DevFeed: [Transforming Capital One's Data Marketplace with Embedded Governance and a Product Mindset](<https://devfeed.tech/articles/transforming-capital-one-s-data-marketplace-with-embedded-governance-and-a-product-mindset-23548.md>)

Original publisher: [Read original article](<https://www.apollographql.com/blog/transforming-capital-ones-data-marketplace-with-embedded-governance-and-a-product-mindset>)

Author: Valeria Gomez

Published: 2026-01-13T13:34:19Z

Content type: article

Language: en

Sources: [Apollo Blog](<https://devfeed.tech/sources/apollo-blog.md>)

Topics: [GraphQL](<https://devfeed.tech/topics/graphql.md>), [Architecture & Design](<https://devfeed.tech/topics/architecture-design.md>), [Orchestration](<https://devfeed.tech/topics/orchestration.md>), [Microservices](<https://devfeed.tech/topics/microservices.md>), [data](<https://devfeed.tech/topics/data.md>)

Tags: [apis](<https://devfeed.tech/tags/apis.md>), [apollo-federation](<https://devfeed.tech/tags/apollo-federation.md>), [dashboards](<https://devfeed.tech/tags/dashboards.md>), [data](<https://devfeed.tech/tags/data.md>), [ecosystems](<https://devfeed.tech/tags/ecosystems.md>), [events](<https://devfeed.tech/tags/events.md>), [governance](<https://devfeed.tech/tags/governance.md>), [graphql](<https://devfeed.tech/tags/graphql.md>), [latency](<https://devfeed.tech/tags/latency.md>), [low-latency](<https://devfeed.tech/tags/low-latency.md>), [microservices](<https://devfeed.tech/tags/microservices.md>), [orchestration](<https://devfeed.tech/tags/orchestration.md>), [performance](<https://devfeed.tech/tags/performance.md>), [platform](<https://devfeed.tech/tags/platform.md>), [product-mindset](<https://devfeed.tech/tags/product-mindset.md>), [reuse](<https://devfeed.tech/tags/reuse.md>), [router](<https://devfeed.tech/tags/router.md>), [scale](<https://devfeed.tech/tags/scale.md>)

### AI overview

A recap of GraphQL Summit 2025 describing how Capital One used GraphQL, Apollo Federation, and Apollo Router to build an enterprise data marketplace. The approach centralized orchestration across microservices, applied company standards, improved data discoverability and reuse, and was validated with a production-traffic rollout showing low latency, high throughput, and no disruption to live workloads.

### Source excerpt

A recap from GraphQL Summit 2025 on how Capital One applied a product mindset to build an enterprise data marketplace powered by Apollo Large organizations with complex data ecosystems often face a familiar challenge. As systems evolve over time, data becomes harder to find, harder to trust, and harder to use. Teams build APIs independently, integrations multiply, and identifying the authoritative source of data can take significant effort.

## Building an Enterprise Data Warehouse on Heroku: From Complex ETL to Seamless Salesforce Integration

DevFeed: [Building an Enterprise Data Warehouse on Heroku: From Complex ETL to Seamless Salesforce Integration](<https://devfeed.tech/articles/building-an-enterprise-data-warehouse-on-heroku-from-complex-etl-to-seamless-salesforce-integration-26383.md>)

Original publisher: [Read original article](<https://www.heroku.com/blog/building-an-enterprise-data-warehouse-on-heroku/>)

Author: Sudarshan Hiray

Published: 2025-11-05T20:05:38Z

Content type: article

Language: en

Sources: [Heroku](<https://devfeed.tech/sources/heroku.md>)

Topics: [Heroku](<https://devfeed.tech/topics/heroku.md>), [data-architecture](<https://devfeed.tech/topics/data-architecture.md>), [Databases](<https://devfeed.tech/topics/databases.md>), [Monitoring](<https://devfeed.tech/topics/monitoring.md>)

Tags: [analytics](<https://devfeed.tech/tags/analytics.md>), [applications](<https://devfeed.tech/tags/applications.md>), [article](<https://devfeed.tech/tags/article.md>), [building](<https://devfeed.tech/tags/building.md>), [data](<https://devfeed.tech/tags/data.md>), [ecosystems](<https://devfeed.tech/tags/ecosystems.md>), [engineering](<https://devfeed.tech/tags/engineering.md>), [enterprise](<https://devfeed.tech/tags/enterprise.md>), [etl](<https://devfeed.tech/tags/etl.md>), [heroku](<https://devfeed.tech/tags/heroku.md>), [heroku-postgres](<https://devfeed.tech/tags/heroku-postgres.md>), [integration](<https://devfeed.tech/tags/integration.md>), [platforms](<https://devfeed.tech/tags/platforms.md>), [salesforce](<https://devfeed.tech/tags/salesforce.md>), [services](<https://devfeed.tech/tags/services.md>), [systems](<https://devfeed.tech/tags/systems.md>), [tools](<https://devfeed.tech/tags/tools.md>), [warehouse](<https://devfeed.tech/tags/warehouse.md>)

### AI overview

Heroku describes an enterprise data warehouse architecture that unifies Salesforce and data from multiple application databases for real-time analytics. The approach uses Heroku Connect, Heroku Postgres follower databases, and a unified analytics platform to address API limits, ETL complexity, production database load, and fragmented monitoring.

### Source excerpt

Modern businesses don't just run on Salesforce--they run on entire ecosystems of applications. At Heroku, we operate dozens of services alongside our Salesforce instance such as billing systems, user management platforms, analytics engines, and support tools. Traditional approaches to unifying this data create more problems than they solve. In this article, we'll see how we [...] The post Building an Enterprise Data Warehouse on Heroku: From Complex ETL to Seamless Salesforce Integration appeared first on Heroku.

## Platform Strategy, JavaScript-First Development, and the Web's Mobile Constraints

DevFeed: [Platform Strategy, JavaScript-First Development, and the Web's Mobile Constraints](<https://devfeed.tech/articles/platform-strategy-and-its-discontents-26548.md>)

Original publisher: [Read original article](<https://infrequently.org/2024/10/platforms-are-competitions/>)

Author: Alex Russell

Published: 2024-10-27T00:00:00Z

Content type: opinion

Language: en

Sources: [Alex Russell](<https://devfeed.tech/sources/alex-russell.md>)

Topics: [JavaScript](<https://devfeed.tech/topics/javascript.md>), [Front end](<https://devfeed.tech/topics/frontend.md>), [Web Development](<https://devfeed.tech/topics/web-development.md>), [Development](<https://devfeed.tech/topics/development.md>), [Mobile](<https://devfeed.tech/topics/mobile.md>), [Web](<https://devfeed.tech/topics/web.md>), [React](<https://devfeed.tech/topics/react.md>)

Tags: [browsers](<https://devfeed.tech/tags/browsers.md>), [competition](<https://devfeed.tech/tags/competition.md>), [cost](<https://devfeed.tech/tags/cost.md>), [development](<https://devfeed.tech/tags/development.md>), [ecosystems](<https://devfeed.tech/tags/ecosystems.md>), [frontend](<https://devfeed.tech/tags/frontend.md>), [javascript](<https://devfeed.tech/tags/javascript.md>), [legacy](<https://devfeed.tech/tags/legacy.md>), [mobile](<https://devfeed.tech/tags/mobile.md>), [performance](<https://devfeed.tech/tags/performance.md>), [speed](<https://devfeed.tech/tags/speed.md>), [strategy](<https://devfeed.tech/tags/strategy.md>), [web](<https://devfeed.tech/tags/web.md>), [web-developers](<https://devfeed.tech/tags/web-developers.md>), [webdev](<https://devfeed.tech/tags/webdev.md>)

### AI overview

The article argues that JavaScript-first frontend practices and desktop-oriented tools have contributed to increasingly costly failures to deliver usable web experiences on phones. It frames platform strategy around making the web easier, faster, and more secure for everyday tasks.

### Source excerpt

This post is an edited and expanded version of a now-mangled Mastodon thread. Contents Platforms Are Competitions ...and We're Losing Win Condition You Do It To Yourself, And That's What Really Hurts Groundhog Day Reboot Some in the JavaScript community imagine that I harbour an irrational dislike of their tools when, in fact, I want nothing more than to stop thinking about them. Live-and-let-live is excellent guidance, and if it weren't for React et. al.'s predictably ruinous outcomes, the public side of my work wouldn't involve educating about the problems JS-first development has caused. But that's not what strategy demands, and strategy is my job.1 I've been holding my fire (and the confidences of consulting counterparties) for most of the last decade. Until this year, I only occasionally posted traces documenting the worsening rot. I fear this has only served to make things look better than they are. Over the past decade, my work helping teams deliver competitive PWAs gave me a front-row seat to a disturbing trend. The rate of failure to deliver usable experiences on phones was increasing over time, despite the eye-watering cost of JS-based stacks teams were reaching for. Worse and costlier is a bad combo, and the opposite of what competing ecosystems did. Native developers reset hard when moving from desktop to mobile, getting deeply in touch with the new constraints. Sure, developing a codebase multiple times is more expensive than the web's write-once-test-everywhere approach, but at least you got speed for the extra cost. That's not what web developers did. Contemporary frontend practice pretended that legacy-oriented, desktop-focused tools would perform fine in this new context, without ever checking if they did. When that didn't work, the toxic-positivity crowd blamed the messenger.2 Frontend's tragically timed turn towards JavaScript means the damage isn't limited to the public sector or "bad" developers. Some of the strongest engineers I know find thems

## Europe's cloud dependence and the case for specialized European cloud services

DevFeed: [Europe's cloud dependence and the case for specialized European cloud services](<https://devfeed.tech/articles/taking-the-airbus-to-the-ikea-cloud-36550.md>)

Original publisher: [Read original article](<https://berthub.eu/articles/posts/taking-the-airbus-to-the-ikea-cloud/>)

Published: 2024-01-11T08:27:14Z

Content type: opinion

Language: en

Sources: [Bert Hubert's writings](<https://devfeed.tech/sources/bert-hubert-s-writings.md>)

Topics: [Cloud](<https://devfeed.tech/topics/cloud.md>), [Computing](<https://devfeed.tech/topics/computing.md>)

Tags: [article](<https://devfeed.tech/tags/article.md>), [business](<https://devfeed.tech/tags/business.md>), [cloud](<https://devfeed.tech/tags/cloud.md>), [collaboration](<https://devfeed.tech/tags/collaboration.md>), [communication](<https://devfeed.tech/tags/communication.md>), [computing](<https://devfeed.tech/tags/computing.md>), [ecosystems](<https://devfeed.tech/tags/ecosystems.md>), [europe](<https://devfeed.tech/tags/europe.md>), [hyperscaler](<https://devfeed.tech/tags/hyperscaler.md>), [innovation](<https://devfeed.tech/tags/innovation.md>), [policy](<https://devfeed.tech/tags/policy.md>), [procurement](<https://devfeed.tech/tags/procurement.md>), [providers](<https://devfeed.tech/tags/providers.md>)

### AI overview

This opinion article argues that Europe depends on major non-European hyperscaler cloud providers and cannot realistically create a competing mega-cloud through legislation, standardisation, procurement, or coordinated government action. It suggests that specialized European email, communication, and collaboration services could provide a more feasible starting point for a European cloud ecosystem.

### Source excerpt

This article is part of a series on (European) innovation and capabilities. The very short version: All of computing is moving to the cloud at a rapid pace, including (government) parts you might want to keep under your own control Europe has no relevant 'hyperscaler' cloud providers at all, and there is a desire to change this by policy means Competing with the IKEA-concept is nearly impossible. Offering IKEA-like products but then with a smaller range is not an attractive proposition.

## Matter: Multi-Admin, Identifiers, and Fabrics

DevFeed: [Matter: Multi-Admin, Identifiers, and Fabrics](<https://devfeed.tech/articles/matter-multi-admin-identifiers-and-fabrics-13916.md>)

Original publisher: [Read original article](<https://developer.espressif.com/blog/matter-multi-admin-identifiers-and-fabrics/>)

Author: John Lee

Published: 2022-01-18T00:00:00Z

Content type: tutorial

Language: en

Sources: [Blog on Developer Portal](<https://devfeed.tech/sources/blog-on-developer-portal.md>)

Topics: [Matter](<https://devfeed.tech/topics/matter.md>), [configuration](<https://devfeed.tech/topics/configuration.md>), [Network](<https://devfeed.tech/topics/network.md>)

Tags: [blog](<https://devfeed.tech/tags/blog.md>), [certificates](<https://devfeed.tech/tags/certificates.md>), [configuration](<https://devfeed.tech/tags/configuration.md>), [devices](<https://devfeed.tech/tags/devices.md>), [ecosystems](<https://devfeed.tech/tags/ecosystems.md>), [esp32](<https://devfeed.tech/tags/esp32.md>), [fabric](<https://devfeed.tech/tags/fabric.md>), [identity](<https://devfeed.tech/tags/identity.md>), [iot](<https://devfeed.tech/tags/iot.md>), [matter](<https://devfeed.tech/tags/matter.md>), [network](<https://devfeed.tech/tags/network.md>), [node](<https://devfeed.tech/tags/node.md>)

### AI overview

This article explains how Matter multi-admin devices identify and authenticate across multiple ecosystems. It covers operational credentials, Node Operational Certificates, node identifiers, Matter fabrics, Root CA certificates, and commissioning.

### Source excerpt

[This is article #6 in the Espressif Matter Series of articles. You may read the first part here.] In the previous articles we talked about Matter devices communicating with each other by themselves, or Matter devices participating in multiple ecosystems simultaneously. As you can see in the image here, this lightbulb is part of 2 distinct ecosystems, green and red. Each of these ecosystems don't know about the other, and they are powered by 2 separate organisations (Org1 and Org2).