Security
eslint-import-resolver-typescript: A Security Guide
eslint-import-resolver-typescript lives in your dev toolchain, which is precisely the part of the supply chain attackers now target. Here is how to keep it clean.
Jun 4, 20265 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedSecurity
GPLv2 vs GPLv3: A Practical Comparison for Developers
The real differences between GPLv2 and GPLv3 that affect how you ship software: patents, tivoization, license compatibility, and the security angle.
Jun 4, 20266 min read
Security
SFMC API Security: How to Integrate Marketing Cloud Safely
A security-focused guide to the Salesforce Marketing Cloud (SFMC) API: OAuth scopes, token handling, least-privilege packages, and protecting subscriber data.
Jun 4, 20266 min read
Security
Rate Limiting Vulnerability: Why Missing Limits Are an OWASP Risk
A rate limiting vulnerability lets attackers hammer your endpoints unchecked, enabling brute force, credential stuffing, and resource exhaustion. Here is how to find and fix it.
Jun 4, 20266 min read
Security
Using a Code Tester Safely: Online Playgrounds and the Risks
An online code tester is a fast way to run a snippet without local setup, but pasting real code into someone else's server carries real risk. Here is how to test code online without leaking secrets.
Jun 3, 20266 min read
Security
GPL Adalah: What the GNU General Public License Means for Your Code
GPL adalah lisensi copyleft yang paling terkenal. This guide explains what the GPL actually requires, why the copyleft obligation matters, and how it affects the code you ship.
Jun 3, 20266 min read
Security
localStorage Security: Why You Shouldn't Keep Tokens There
localStorage security comes down to one fact: any script on your page can read it. That makes it the wrong place for auth tokens and anything sensitive.
Jun 3, 20266 min read
Security
Regex DDoS (ReDoS): How Catastrophic Backtracking Takes Down a Service
A regex DDoS, or ReDoS, weaponizes a slow regular expression so a short input pins a CPU core for seconds or minutes. Here is why it happens and how to detect and fix it.
Jun 3, 20265 min read
Security
CVE-2023-34034 Explained: The Spring Security WebFlux Authorization Bypass
CVE-2023-34034 lets attackers slip past Spring Security rules in WebFlux apps because of a wildcard-matching mismatch. Here is exactly what breaks, who is affected, and how to fix it.
Jun 3, 20265 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.