Open Source
In-depth guides and analysis on open source from the Safeguard engineering team.
252 articles
How to Use bcryptjs from npm Safely: A Security Review
The bcryptjs npm package is a pure-JavaScript bcrypt implementation with zero native dependencies. Here is when to reach for it, how to use it correctly, and the pitfalls that weaken password hashing.
react-native-loading-spinner-overlay: Is It Still Safe to Use?
A security look at react-native-loading-spinner-overlay: its maintenance status, dependency footprint, and how to reason about an unmaintained UI package.
React 18.3: The Safe Stepping Stone to React 19
React 18.3 is functionally identical to 18.2 but adds deprecation warnings for React 19. Upgrading through it is a security move as much as a compatibility one.
mocha npm: Security Review and Safe Usage
The mocha npm test framework runs only code you write, so its direct risk is low, but its dependency tree generates npm audit noise worth understanding.
angular-ui-router: Security and Maintenance Guide
angular-ui-router is the classic routing library for AngularJS 1.x. The library itself is stable, but the framework it depends on reached end of life, and that is the real risk to weigh.
react-diff-view: Using the Diff Component Securely
react-diff-view renders git unified diffs in React apps. Here is how it works, where the security considerations sit, and how to keep it safe when you render untrusted diffs.
@shopify/react-native-skia: A Security and Safe-Usage Guide
The @shopify/react-native-skia library brings high-performance 2D graphics to React Native. Here is an honest look at its security profile and how to install it safely.
Rendering Markdown Securely in React Native with react-native-markdown-display
react-native-markdown-display is the maintained way to render Markdown in React Native, but rendering untrusted Markdown safely takes more than dropping in the component. Here is the security guide.
TinyMCE npm Security: XSS History and Safe Configuration
The tinymce npm package is a capable rich-text editor with a long history of XSS advisories. Keeping it current and configuring it defensively is what keeps it safe.
React Native Image Libraries: fast-image, slider-box, crop-picker Reviewed
react-native-image-slider-box, fast-image, and image-crop-picker solve real UI problems, but their maintenance status and native code deserve a hard look before you ship them.
Puppeteer on npm: A Security Review and Safe Usage Guide
puppeteer npm installs a library that drives a real headless Chrome. That power brings real risks — install scripts, SSRF, and a browser-sized attack surface. Here is how to use it safely.
tough-cookie npm: Security Review and Safe Usage
A security review of the tough-cookie npm package, including the CVE-2023-26136 prototype pollution flaw, the version that fixes it, and how to use it safely.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.