Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Nx hashes sources, config, dependency versions and arguments, then stores terminal output and files. See what that means for cache trust and secrets.
The NVD API 2.0 returns each CVE with metrics, weaknesses and configurations. Learn how nested cpeMatch nodes work and what vulnerable false means.
In NuGet a plain version is a minimum, brackets pin and a star floats. See what each resolves to and why upper bounds on others' packages are discouraged.
NuGet drops a zero fourth part, strips leading zeros and removes SemVer build metadata when matching versions. Why scanners must normalise the same way.
Turn on the NuGet lock file with RestorePackagesWithLockFile, then use locked mode in CI so restore installs the exact packages or fails. Steps and limits.
NuGet Audit runs on restore and reports known vulnerabilities by severity. Settings for mode, level and sources, plus how .NET 10 changes the default.
npm reads project, user, global and built-in npmrc files plus env vars and flags. Which wins, how auth keys are scoped to a registry, where tokens belong.
The CycloneDX npm tool and npm sbom can target workspaces. Learn the options, what the workspace root adds, and how to pick the right file boundary.
npm version bumps package.json, makes a git commit and tag, and runs three lifecycle scripts. Know the order, the clean tree rule and signed tags.
Weekly insights on software supply chain security, delivered to your inbox.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.
