Safeguard
Tag

python

Safeguard articles tagged "python" — guides, analysis, and best practices for software supply chain and application security.

101 articles

AppSec

Python: Check If a String Is a Valid URL (Safely)

How to check if a string is a URL in Python using urllib.parse, when to add validators, and why parseable does not mean safe for the URL you are about to fetch.

May 11, 20266 min read
DevSecOps

Python pickle.dump Explained, and Why It Can Get You Popped

How Python's pickle.dump actually works, a runnable example, and the deserialization risk that turns a saved object into remote code execution.

May 3, 20266 min read
DevSecOps

Python on macOS: A Security-Minded Setup Guide

Running Python on Mac OS is easy to get wrong in ways that bite you later. Here is how to install and isolate Python for Mac OS without the common security traps.

Apr 23, 20266 min read
DevSecOps

Is Python setup.py Still Safe? Security Risks and the Move to Building Wheels

python setup.py executes arbitrary code at install time and its legacy commands are deprecated. Here is what that means for security and how to build a wheel the modern way.

Apr 19, 20265 min read
DevSecOps

How to Install Python on a MacBook Safely (2025 Guide)

The macOS system Python is not the one you should build on. Here is how to install Python on a MacBook the right way, isolate projects, and avoid supply-chain surprises.

Apr 18, 20265 min read
AppSec

Python 2 vs Python 3: Differences and Why 2.x Is a Security Liability

The real differences between Python 2 and Python 3 — print, strings, division, integers — and why running anything on 2.x after its end of life is now a security decision, not a compatibility one.

Apr 12, 20266 min read
DevSecOps

Installing Python on Mac: A Safe, Step-by-Step Guide

Installing Python on Mac has a few paths, and the safest one keeps you off the system Python and away from sudo pip. Here is how to do it cleanly.

Apr 12, 20265 min read
Supply Chain Security

PyPI Malicious Packages 2025: Python's Growing Supply Chain Problem

PyPI faced a surge of malicious package uploads in early 2025, targeting data science, AI/ML, and cloud development workflows. Here's the full picture.

Apr 11, 20266 min read
DevSecOps

How to Install Python on macOS the Right Way

The fastest safe way to install Python on macOS is Homebrew plus a version manager, not the system Python. Here is the setup that keeps your machine and your dependencies clean.

Apr 10, 20266 min read
DevSecOps

How to Use Python on Mac: Install, Switch Versions, and Set a Default

Learning how to use Python on Mac starts with not touching the system Python. Here is a clean setup for installing, switching, and pinning versions.

Apr 9, 20265 min read
DevSecOps

Updating Python on macOS from the Terminal (Without Breaking Things)

How to update Python on a Mac terminal the safe way: Homebrew or pyenv for the interpreter, never the system copy, plus how to set your default version and keep old installs from lingering.

Apr 4, 20266 min read
DevSecOps

How to Download Python for Mac (Safely)

There are several ways to download Python for Mac. Here is how to pick the right one and verify what you install so you don't get a tampered interpreter.

Mar 29, 20266 min read

Self-healing security runs on Safeguard.

Your first fix PR is minutes away.

No sales call required, even your agent can complete the purchase over MCP.

python (Page 5) — Safeguard Blog