Tag

lockfiles

Safeguard articles tagged "lockfiles" — guides, analysis, and best practices for software supply chain and application security.

13 articles

Best Practices

Why Dependency Pinning Alone Is Not Enough

Pinning dependencies feels like a complete answer to supply chain risk. It is not — and the gap between pinning and real integrity matters more in 2022 than ever.

May 17, 20226 min read