Developer Tools
Validate a reachability tool with seeded tests on your own code
Plant known calls and known dead code in a test repo, then see whether a reachability tool gets them right. A practical plan with six test cases.
Oct 18, 20263 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedDeveloper Tools
uv workspace or path dependencies: choosing for a Python monorepo
A uv workspace shares one uv.lock and one Python requirement. Path dependencies keep projects independent. Use this guide to pick for your monorepo.
Oct 18, 20263 min read
Developer Tools
uv.lock explained: the Python lockfile and how it updates
What uv.lock records, why one file covers every platform, when uv updates it, and why you should commit it to version control but never edit it by hand.
Oct 18, 20263 min read
Developer Tools
Timestamps in logs: use UTC, RFC 3339 and synced clocks
Write log timestamps in UTC using the RFC 3339 format and keep server clocks in sync, or your incident timeline will not line up across systems.
Oct 18, 20263 min read
Developer Tools
Usage credits: working past plan limits and what it costs you
Paid Claude plans can add usage credits to keep working past a limit. What the docs say about spend limits, who controls them and the cache side effect.
Oct 18, 20263 min read
Developer Tools
Unique per-device passwords for IoT makers: what good looks like
How to design factory passwords for connected products: unique, not derived from public data, hardened against guessing, and never hard coded in firmware.
Oct 18, 20263 min read
Developer Tools
Unicode in passwords: counting length and normalizing before hashing
NIST 800-63B says to count each Unicode code point as one character, accept Unicode, and normalize before hashing. Why this stops login bugs and truncation.
Oct 18, 20263 min read
Developer Tools
Turn a scan finding into a ticket your team will act on
A good vulnerability ticket names the package, version, fix, exposure and deadline. A template and example for turning scan output into work.
Oct 18, 20263 min read
Developer Tools
Trusted Types explained: a browser guardrail against DOM XSS
Trusted Types makes the browser reject plain strings at dangerous DOM sinks. See how policies work, how to enable it, and how to roll it out safely.
Oct 18, 20263 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.