Developer Tools
How to audit installed editor extensions across a dev team
A step by step way to inventory VS Code and JetBrains extensions across a team, rank them by risk, and decide what to keep, pin, replace or remove.
Oct 18, 20263 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedDeveloper Tools
Attribute AI spend by team with workspaces and usage reports
Split LLM API spend by team and environment using workspaces, scoped API keys and the usage and cost reports. Includes the gaps to plan around.
Oct 18, 20263 min read
Developer Tools
Ten supply chain questions to ask in plain English
Ten plain English questions to ask a supply chain query tool about your CVEs, components, projects and controls, and how to check each answer.
Oct 18, 20263 min read
Developer Tools
How to test developer experience in a security tool pilot
Run a two week pilot with real developers, a fixed survey, and measured pull request delay to learn whether a security tool will be used or ignored.
Oct 18, 20263 min read
Developer Tools
Approving a deployment from your phone: a safety checklist
How to approve a protected deployment from a phone without becoming the weak link: what to check, what to refuse, and how to block self-approval.
Oct 18, 20264 min read
Developer Tools
When to approve an AI written pull request: the code health test
Google's review standard says approve when a change improves overall code health, even if imperfect. How that rule applies to AI written pull requests.
Oct 18, 20263 min read
Developer Tools
Apple silicon for local LLMs: what unified memory changes
Shared CPU and GPU memory changes how you budget for a local model. What MLX and llama.cpp document, and what to measure before you buy hardware.
Oct 18, 20263 min read
Developer Tools
API spend caps and usage tiers: what happens when you hit the limit
Providers cap monthly or short window spend by usage tier. See Anthropic and Google caps as of October 2026, the errors you get, and how to set your own.
Oct 18, 20263 min read
Developer Tools
API rate limits explained: RPM, ITPM, OTPM and token buckets
Rate limits cap requests and tokens per minute, separate from your spend. Learn RPM, input and output token limits, token buckets and how to handle a 429.
Oct 18, 20263 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.