Open Source
webpack-cli: What It Does and How to Keep It Secure
webpack-cli is the command-line front end to webpack, and as a build-time dependency it deserves the same supply-chain scrutiny as your runtime packages.
May 19, 20265 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedBuyer's Guides
Endor Labs Pricing: What It Costs and Who It's Built For
Endor Labs doesn't publish pricing publicly. Here's what actually drives the cost, what to ask sales reps, and how Safeguard's approach compares on scope.
May 19, 20267 min read
Security
Snyk Test CLI: How to Scan Projects from the Command Line
The snyk test CLI command scans your project's dependencies for known vulnerabilities right from the terminal. Here is how to run it, gate on severity, and wire it into CI without slowing everyone down.
May 19, 20265 min read
DevSecOps
How to implement DevSecOps in 4 steps
A concrete, 4-step playbook for implementing DevSecOps — pipeline gating, SBOM generation, reachability-based triage, and auto-fix PRs.
May 19, 20267 min read
Open Source
react-native-version-check: Prompting App Updates the Safe Way
react-native-version-check compares the installed app version against the store listing so you can prompt users to update. Here is how to wire it up and its security tradeoffs.
May 19, 20266 min read
Application Security
First-Party Code vs Open Source Risk: Where Should AppSec...
First-party code and open source dependencies are one attack surface. See how Safeguard's unified scanning compares to Endor Labs' open-source-first approach.
May 19, 20269 min read
Open Source
qrcode.react Security: Safe QR Code Rendering in React
A security guide to the qrcode.react library, the risks of encoding untrusted data into QR codes, and how to render them safely in a React app.
May 19, 20265 min read
DevSecOps
DevSecOps automation: principles, frameworks, and tools
A practical breakdown of DevSecOps automation frameworks — principles, standards like NIST SSDF, and the tools that turn shift-left security into a repeatable pipeline.
May 19, 20268 min read
AppSec
What Are the Benefits of Using SAST Tools During Code Review?
SAST tools turn code review into a consistent security checkpoint by flagging vulnerable patterns automatically, so reviewers can focus on judgment instead of pattern-matching.
May 19, 20265 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.