From Pentest to 1.7 Million Downloads, Part 2: The Lessons Nobody Taught Me

Strategic Technology Consultation Services

This episode of The Modern .NET Show is supported, in part, by RJJ Software's Strategic Technology Consultation Services. If you're an SME (Small to Medium Enterprise) leader wondering why your technology investments aren't delivering, or you're facing critical decisions about AI, modernization, or team productivity, let's talk.

Show Notes

Hey everyone, and welcome back to The Modern .NET Show; the premier .NET podcast, focusing entirely on the knowledge, tools, and frameworks that all .NET developers should have in their toolbox. I'm your host Jamie Taylor, bringing you conversations with the brightest minds in the .NET ecosystem.

Today's episode is a little different from the norm. I waned to, temporarily, take you away from the "AI is the best thing ever/worst thing ever" news cycle, and talk to you about an open source project that I work on called "OwaspHeaders.Core"

This is the second in a two-part series about OwaspHeaders.Core and focusses on providing a timeline of the evolution of the package; but this isn't going to a be all about how great I am. I'm going to cover the lessons I learned, the choices I made, and the help that I had from the community.

Before we jump in, a quick reminder: if The Modern .NET Show has become part of your learning journey, please consider supporting us through Patreon or Buy Me A Coffee. Every contribution helps us continue bringing you these in-depth conversations with industry experts. You'll find all the links in the show notes.

Anyway, without further ado, let's sit back, open up a terminal, type in `dotnet new podcast` and we'll dive into the core of Modern .NET.

Full Show Notes

The full show notes, including links to some of the things we discussed and a full transcription of this episode, can be found at: https://dotnetcore.show/season-8/from-pentest-to-1-7-million-downloads-part-2-the-lessons-nobody-ever-taught-me/

Useful Links:

• OwaspHeaders.Core
  • NuGet package
  • GitHub repository
  • Documentation
  • Contributors graph
  • Scott Harden's PR #96
  • mkokabi's derivative for Azure Isolated Functions
• Companion episodes
  • S07E09 - Modern .NET NuGet Packaging with Scott Harden
  • S08E02 - Compassionate Coding: Safia Abdalla's Insights on Empathy in Open-Source Development
  • Safia Abdalla's website (current role at Warp)
• Supply chain & trust
  • OpenSSF Best Practices badge for OwaspHeaders.Core (passing, 96%)
  • OpenSSF Scorecard
  • GitHub Build Provenance Attestations
  • CodeQL
  • TanStack npm Supply-Chain Compromise Postmortem (11 May 2026)
• Scott Harden
  • Scott Harden's website
  • ScottPlot
• Communities and shows mentioned
  • Coding Blocks
  • Tabs and Spaces (now retired) on Spotify
  • James Studdart (Cynical Developer)
  • Zac Braddy on LinkedIn
• NuGet packaging references
  • NuGet documentation
  • Source Link
• Historical references
  • AppVeyor
  • GitHub Actions documentation
• Part one of this series

Supporting the show:

• Leave a rating or review
• Buy the show a coffee
• Become a patron

Getting in Touch:

• Via the contact page
• Joining the Discord

Remember to rate and review the show on Apple Podcasts, Podchaser, or wherever you find your podcasts, this will help the show's audience grow. Or you can just share the show with a friend.

And don't forget to reach out via our Contact page. We're very interested in your opinion of the show, so please get in touch.

You can support the show by making a monthly donation on the show's Patreon page at: https://www.patreon.com/TheDotNetCorePodcast.

Music created by Mono Memory Music, licensed to RJJ Software for use in The Modern .NET Show.

Editing and post-production services for this episode were provided by MB Podcast Services.