open-source
Safeguard articles tagged "open-source" — guides, analysis, and best practices for software supply chain and application security.
167 articles
netty-handler: TLS in Netty and Keeping It Patched
netty-handler is where Netty's TLS lives, which makes it the module scanners flag most. What SslHandler actually does, the hostname-verification gotcha, and the patch cadence to keep.
Node.js Supply Chain Defence Program 2026
A practical 2026 blueprint for hardening Node.js supply chains across npm, lockfiles, scripts, and runtime — and where Safeguard plugs into the program.
Open Source vs Commercial Security Scanners 2026
When to use Trivy, Grype, and OSV-Scanner versus commercial scanners in 2026: honest tradeoffs, integration realities, and decision criteria.
Python Monorepo Supply Chain Controls 2026
How to design supply chain controls for a Python monorepo in 2026 — from PyPI quarantine to wheel provenance — with Safeguard as the policy backbone.
The MIT Licence Explained: What It Permits and Its Security Implications
The MIT licence is one of the most permissive open source licences in use, and understanding what it allows tells you a lot about the risk you inherit with a dependency.
Java/Spring Supply Chain Defence Blueprint 2026
A 2026 blueprint for hardening Java and Spring supply chains across Maven, Gradle, fat JARs, and runtime — with Safeguard as the policy and evidence layer.
Open Source Security Census 2025: Who Maintains the Code We All Depend On?
An analysis of the state of open-source security in 2025. Critical infrastructure runs on projects maintained by small, often unpaid teams. Here is what the data shows and why it matters.
License Type: Understanding Software License Categories
A software license type defines what you may legally do with code you did not write. Here are the main categories, the obligations each carries, and why they matter for compliance.
Go Modules Supply Chain Program Blueprint 2026
A 2026 blueprint for Go modules supply chain security — from proxy and checksum database to vendoring and binary provenance — anchored by Safeguard.
How to generate an SBOM with free open source tools
Free tools like Syft and Trivy can generate an SBOM in minutes. Here's exactly how, where open source tooling stops scaling, and how Safeguard fills the gap.
Tern SBOM Generation Walkthrough for 2026
A walkthrough of generating SBOMs with Tern in 2026, covering layer-by-layer inspection, CycloneDX output, and practical comparison with Syft.
npm Commands: A Security-Focused Guide to Safe Usage
The npm commands you run every day have security consequences. Here is a practical npm commands list with the safe way to use each one.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.