Awards, kind words from the community, and milestones along the way.
GitHub Stars are a diverse set of individuals that inspire, educate, and influence those around them. They are nominated by GitHub as experts and technical leaders who passionately share their expertise with others.
About GitHub Stars ↗︎
“Liran is a tireless advocate for security in the JS ecosystem. He works hard to build bridges, educate developers about security issues, and support Open Source projects working to improve their security posture. Liran has served on the Node security team and is always available to support developers!”
Liran Tal delivered the opening keynote at the OpenSourceDay 2023 event in Italy and was honored to receive the Schrodinger Open Source Day award.
About Open Source Day ↗︎Community appreciation and recognition, alongside personal and professional achievements. Roles reflect the original posts.
56 entries · Newest first
“Hey man! Your content on has helped me a ton 😊”
Scott Spence
Application Team Lead @XtendOps
“Thank you so much. You are my inspiration 😌”
Mohammad Shaad Shaikh
Full Stack Web Developer
“Thanks for your contribution. You make world a better place mate”
ManOrInfinity
Engineer
“היי לירן, יצא לי לצפות בהרצאה שהעברת לטכניון בנושא חבילות זדוניות ורק רציתי להגיד שההרצאה הייתה מרתקת וגם העברת אותה בצורה ממש ברורה (אם במקרה יש לך עוד הרצאות פומביות שהעברת או שתעביר, אשמח לשמוע על כך).”
Student
A university student
“Open Source is awesome! I have been learning a lot about ESLint, ASTs, and security working on this PR: https://github.com/eslint-community/eslint-plugin-security/pull/95 - A huge thank you to @simonesanfradev for involving me in this, to @liran_tal for inspiring this work, and to @slicknet for the awesome review session!”
Luciano Mammino
Senior Architect @fourTheorem
“This guy is the best!!! I hugged him tight! ❤️❤️❤️”
Natalia Venditto
Developer Experience at Microsoft
“This morning I learned how to author an ESLint plugin! Pretty cool 😍 Thanks @simonesanfradev and @liran_tal”
Luciano Mammino
Senior Architect @fourTheorem
“Thanks to @liran_tal, we're now running Node 18 Debian (slim) in prod & I measured the improvements vs Alpine w/ same workload: ✓ -16.3% CPU, ❌+8.6% RAM, ✓ -3.7% exec time, ✓ -14.5% start latency, ✓ -17.6% billable time (& thus $ saved), 5 lines of config changed. Anyone know why?”
Neil Craig
Lead Technical Architect at @BBC.
“This re-prompted me to test Debian (Bullseye + Node 18.11 vs Alpine) images on Cloud Run. I ran a quick experiment for a couple of hours. Debian is ~: 30% lower CPU, 30% lower startup latency, 30% lower billable time ($), ~10% more RAM Thanks so much, as always, @liran_tal!”
Neil Craig
Lead Technical Architect at @BBC.
“All @nordicjs talks are finally online, thanks a lot! here are my favs: ES2025 news, Interviews for developers, hacking react apps by @liran_tal, Leveraging types to make UI by @bloodyowl, security risks in your node_modules by @feross, web perf boost by @vitalyf”
George Sifalda
Early startups dev advisor
“This should be a standard for any back-end-to-front-end integration! Thank you @liran_tal!”
Gabriel Mangiurea
Software Engineer at Vercel
“I really love the cheat sheets you made on this. I can't do anything with #NodeJS and #Docker without considering your suggestions/insights”
Manuel S. Martone
Senior Engineering Manager @TrustLayerIO
“path traversal - may the path be with you, @liran_tal warning about dangers in vscode extensions dotdotpwn'ing /etc/hosts @ #NodeConfEU r%2d%u”
Duncan Healy
Software Engineer
“https://github.com/lirantal/lockfile-lint is a great tool to help reduce that risk”
Shu
Software Engineer at Vercel
“🛡 In @HTTPArchive's Web Almanac security chapter, @Saptak013, @liran_tal& @_clarkio share correlations between security adoption measures. They also discuss Web Application Security Working Group's standards & drafts.”
Snyk
“Flattered and deeply honored to be awarded the @OpenJSF JavaScriptLandia Pathfinder Security Award for 2022, announced on OpenJS World 2022 in Austin 🥰. Many thanks to everyone who have nominated me. I'm passionate to educate and help improve developer security for us all.”
Liran Tal
Director of Developer Advocacy, Snyk
“After being in a workshop by @liran_tal and realizing that RegExps can be exploited fairly easily, I decided to use a validation library. I even contributed to the @DefinitelyTyped definition of it :D”
Fernando Carrascosa
Tech Lead
“Congratulations again to the recipients of our first ever JavaScriptLandia awards last week at #openjsworld22! ⭐️ @BethGriggs_⭐️@matteocollina ⭐️Darshan Sen ⭐️@TzviyaSiegman ⭐️@liran_tal ⭐️ @wesbos”
OpenJS Foundation
“Thanks to @liran_tal, now I have a better understanding why you should always use “—ignore-scripts” within your 'npm install' calls 😈 #JSNation #gitnation”
Konstantin Klimashevich
Program Committee member | @thejsnation @reactsummit @ReactAdvanced @reactdayberlin ❤ JS
“I know I'm not allowed to call favsies but REALLY enjoyed @TauriApps' and @liran_tal sessions at #jsnation on, respectively, shipping code with a smaller footprint using open source, and OSS supply chain security 🔒”
Floor
Early startups dev advisor
“JavascriptLandia Security pathfinder award @liran_tal #openjsworld22”
Waleed Ashraf
Member @Node.js
“uuhuuuuuu congrats @liran_tal for the Pathfinder award for security 🤩🤩 #openjsworld22 #openjsworld”
Erick Wendel
GitHub Star, Node.js collaborator
“Thanks @liran_tal, you had great insights and it was a pleasure to pick your brain.”
Agam More
Dev Growth - Remote Dev - Creator of http://Unzip.dev
“Thanks Liran! The island tech community is wonderful and we're proud to be part of it. Your presentation was fantastic and spurred discussion at our firm about how to be more deliberate about web security.”
Sebastian Good
Co-founder of @experoinc
“Did you already hack a React App? We are doing it with @liran_tal #JSDayCAN2022”
Fernando Carrascosa
Tech Lead and Senior Front End Engineer @INGnl Web
“Being part of @canariasjs staff gives me the privilege to attend and record @liran_tal workshop. Wonderful professional and better person. #JSDayCAN2022”
Goyo Regalado
Software Engineer
“'Ready, Code, Push'- Fascinating Advancing open source course, lead by @liran_tal”
Or Manor
DataGeek & Google Developers Women Techmaker Ambassador(WTM)
“תפקיד הDeveloper Relations הוא אחד המאתגרים שיש. אנשי DevRel טובים צריכים לשמור על איזון לא פשוט בין רמה טכנית גבוהה, יכולות תקשורת והעברת מסרים, ויצירה מתמשכת של תוכן בעל ערך. ממש כיף לראות נציגות משלנו, @liran_tal, ברשימת 100 אנשי הDevRel המשפיעים בעולם https://ecairn.com/blog/top-100-influencers-devrel”
Liad Yosef
Head of Frontend at Duda
“We would like to thank 470 npm practitioners who participated in our research and provided valuable feedback. The paper is available in arXiv: https://lnkd.in/gwGt989T. @liran_tal”
Nusrat Zahan
PhD Candidate@NCSU CS || Former Research Intern @Microsoft
“Just want to give a shout out to @liran_tal for writing this cheatsheet for dockerizing nodejs apps: https://snyk.io/wp-content/uploads/10-best-practices-to-containerize-Node.js-web-applications-with-Docker.pdf I don't know how many times I've pointed people to it.”
Jarrod Overson
CTO & Founder of @candle_corp
“Highly recommend this beyond-the-basics Node.js talk by Liran Tal 'Mastering Node.js best practices for Docker-based applications' https://youtu.be/VSEx8gV51lY”
Yoni Goldberg
Node.js consultant
“Highly recommending you to follow @liran_tal as he has been doing a lot of work on improving security of JavaScript & Node.js projects. https://github.com/lirantal has some of the past tools etc. listed, and he does a good amount of writing about the topic.”
Daniel Schildt
Engineer
“An ESLint plugin to detect and stop Trojan Source attacks #infosec #javascript”
JS Party
“Some of the things I'm teaching I know from you 😁”
Zbyszek Tenerowicz
Software Engineer
“Holiday it is coming to an end. I was almost entirely absent from social media but did not code for two weeks! 🤯 I did watch the whole start wars movies instead & finished reading @liran_tal book “Essential Node.js Security for Express Web Applications” which I totally recommend”
Ewerton Azevedo
Engineer
“Security is such an overseen topic on FE development. The @snyksec team is doing a great job in sharing knowledge and @liran_tal is producing content left and right!!”
Atila Fassina
Engineer
“Congratulations to @liran_tal, on becoming a GitHub Star ⭐. Liran ❤️s making security accessible to all. He's a maintainer, speaker, author, and mentor. Check out his GitHub Star profile.”
GitHub
“Good managers push you forward. Amazing ones keep doing it long after you left. Thank you @liran_tal ❤️”
Idan Cohen
Software Developer
“Bumping from January. Great resource from @liran_tal and the Snyk team.”
Kenn White
Engineer
“This has become my primary source for learning docker with node. Thanks for sharing these 💝”
Dev Sharma
Software Developer
“This is one of the best guides I've seen on this topic, really cool stuff. Definitely going to take a look at @snyksec's @github action to add it in our @hoprnet project.”
Jose Aguinaga
Head of Engineering at @hoprnet
“What an honor. Thank you Liran. Some people talk about AppSec (me) and some people really dig in and do the work (you). I'm a big fan. 🤙🏻”
Jim Manico
OWASP Leader
“I want to publicly thank the amazing work that @snyksec is doing for help us to understand what is going on in the #OpenSource ecosystem regarding #Security.This awesome talk from @liran_tal is one of the keys to understand the big picture. 👏👏👏”
Ulises Gascon
Senior Software Engineer
“Dockly is a lightweight CLI Docker management tool. Limited but useful when using SSH.”
Razvan T. Coloja
Linux admin and SBC enthusiast
“Look what I picked up at #OReillySACon. Kudos @liran_tal @guypod and @snyksec!”
Avi Douglen
Founder and CEO Bounce Security
“Excellent talk by @liran_tal at @devseccon TLV. We know that open source packages are dangerous - containers contain lots of them and are VERY dangerous!”
Ethan Schorer
AppSec Team Leader, Monday.com
“Quickly find publicly known security vulnerabilities in a website's JS libs 🖋 by @liran_tal 💭 #cli #javascript #security https://changelog.com/news/83PM ”
Changelog
Tech Lead
“Remember when I said use a lock file and you will be safe? Turns out it's not that that simple! Great read from @liran_tal Why npm lockfiles can be a security blindspot for injecting malicious modules | Snyk https://buff.ly/2mDI5on”
Chris Laughlin
Software Engineer
“Dockly - Manage Docker Containers From Terminal #Dockly #Docker #Virtualization #ManageDockers #LinuxContainers #Nodejs #Opensource #CLI https://ostechnix.com/dockly-manage-docker-containers-from-terminal/”
OSTechNix
“Convinced I gotta get @snyksec into my projects after seeing @liran_tal's talk on security. @VoxxedFrontend”
Vlad Durnea
CEO @madapes
“🐳 lirantal/dockly Immersive terminal interface for managing #docker containers and services https://github.com/lirantal/dockly”
Quentin Adam
CEO @clever_cloud, co-founder @_icilundi, Chairman @OpenInternetPro, co-founder @Makair_fr
“Thanks to @liran_tal, @HugoLocurcio and Hongarc for the contributions to MockIt yesterday 🙇♂️ 🎉 👍 I found https://allcontributors.org through @kentcdodds open source work, and I think it's such a great tool!”
David Boyne
Engineer
“The change that I made in @liran_tal's lockfile-lint just saved me from committing "version": "file:" in my package-lock.json 👌🏻👍🏻”
James Singleton
Senior Software Engineer, Zendesk
“dockly is an immersive terminal interface for managing docker containers and services https://buff.ly/2IHF1gg”
learnk8s
“If you're working with #Docker, do yourself a favour and checkout @liran_tal dockly https://github.com/lirantal/dockly”
Kim Carter
Founder of http://binarymist.io, creator of @purpleteamlabs
“בהרצאה של לירן טל, אחד המתכנתים הטובים שאני מכיר :-) #drupalcampisrael2013”
Ran Bar Zik
Senior Architect at Cyberark
No categories selected. Choose a category to see its entries.
