Tag
dependency-verification
Safeguard articles tagged "dependency-verification" — guides, analysis, and best practices for software supply chain and application security.
2 articles
AI Security
Detecting AI Hallucinations in Generated Code
A USENIX Security 2025 study found 19.7% of packages recommended by 16 LLMs across 576,000 code samples don't exist — and attackers are registering them first.
Jul 8, 20266 min read
Engineering
Java Supply Chain Security Beyond Log4Shell
Log4Shell was the fire drill. The structural problems — unverified Maven resolution, invisible shaded jars, sprawling transitive graphs — are still there. Here's what to actually fix.
Aug 21, 20256 min read