Security
The Pen Testing Tools Worth Knowing in 2025
The right pen testing tools depend on what you're assessing. Here's a practical map of the categories, the well-known options in each, and how they fit a defensive program.
May 1, 20266 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedSecurity
MIT-Lizenz: Was sie erlaubt und was kommerzielle Nutzung bedeutet
Die MIT-Lizenz ist eine der freizuegigsten Open-Source-Lizenzen und erlaubt auch die kommerzielle Nutzung. Wir erklaeren Pflichten, Grenzen und Risiken.
May 1, 20265 min read
Open Source
react-native-screens: A Security Guide for React Native Apps
react-native-screens is a low-level navigation dependency most developers never install directly. Here is what it does and how to think about its security in a mobile app.
May 1, 20266 min read
Security
ng-bootstrap: Using and Securing Angular's Bootstrap Widgets
ng-bootstrap gives Angular apps native Bootstrap widgets with no jQuery dependency. Here is how to keep it current and where the real security work actually lives.
May 1, 20265 min read
Vulnerability Analysis
Filesystem takeover vulnerabilities in the npm package manager
How npm and node-tar "filesystem takeover" CVEs let malicious packages overwrite files via symlinks and path traversal during install.
May 1, 20267 min read
AppSec
Understanding DOM XSS Payloads: How They Work and How to Stop Them
DOM XSS payloads execute entirely in the browser when untrusted input reaches a dangerous sink like innerHTML or eval. Here is how the class works and how to shut it down without shipping exploit code.
May 1, 20266 min read
Open Source
react-native-root-toast: A Security Guide
react-native-root-toast renders toast messages above your React Native app. The security questions are about what text you show, which peer versions you pin, and how you audit the dependency.
May 1, 20265 min read
Vulnerability Analysis
CVE scoring inconsistencies across vulnerability databases
Why the same CVE can carry three different severity scores across NVD, GitHub, and vendor advisories — and how to prioritize anyway.
May 1, 20266 min read
Open Source
Is the npm he Package Safe to Use? A Security Review
The npm he package is a tiny, dependency-free HTML entity encoder and decoder. Here is what it does, whether it is safe, and where developers misuse it.
May 1, 20266 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.