From Pentest to 1.7 Million Downloads, Part 2: The Lessons Nobody Taught Me

Strategic Technology Consultation Services This episode of The Modern .NET Show is supported, in part, by RJJ Software's Strategic Technology Consultation Services. If you're an SME (Small to Medium Enterprise) leader wondering why your technology investments aren't delivering, or you're facing critical decisions about AI, modernization, or team productivity, let's talk.

Show Notes Hey everyone, and welcome back to The Modern .NET Show; the premier .NET podcast, focusing entirely on the knowledge, tools, and frameworks that all .NET developers should have in their toolbox. I'm your host Jamie Taylor, bringing you conversations with the brightest minds in the .NET ecosystem.

Today's episode is a little different from the norm. I waned to, temporarily, take you away from the "AI is the best thing ever/worst thing ever" news cycle, and talk to you about an open source project that I work on called "OwaspHeaders.Core"

This is the second in a two-part series about OwaspHeaders.Core and focusses on providing a timeline of the evolution of the package; but this isn't going to a be all about how great I am. I'm going to cover the lessons I learned, the choices I made, and the help that I had from the community.

Before we jump in, a quick reminder: if The Modern .NET Show has become part of your learning journey, please consider supporting us through Patreon or Buy Me A Coffee. Every contribution helps us continue bringing you these in-depth conversations with industry experts. You'll find all the links in the show notes.

Anyway, without further ado, let's sit back, open up a terminal, type in `dotnet new podcast` and we'll dive into the core of Modern .NET.

Full Show Notes The full show notes, including links to some of the things we discussed and a full transcription of this episode, can be found at: https://dotnetcore.show/season-8/from-pentest-to-1-7-million-downloads-part-2-the-lessons-nobody-ever-taught-me/

Useful Links: OwaspHeaders.Core NuGet package GitHub repository Documentation Contributors graph Scott Harden's PR #96 mkokabi's derivative for Azure Isolated Functions Companion episodes S07E09 - Modern .NET NuGet Packaging with Scott Harden S08E02 - Compassionate Coding: Safia Abdalla's Insights on Empathy in Open-Source Development Safia Abdalla's website (current role at Warp) Supply chain & trust OpenSSF Best Practices badge for OwaspHeaders.Core (passing, 96%) OpenSSF Scorecard GitHub Build Provenance Attestations CodeQL TanStack npm Supply-Ch