Tag

registry-scoping

Safeguard articles tagged "registry-scoping" — guides, analysis, and best practices for software supply chain and application security.

1 article

Supply Chain Security

Dependency confusion and npm supply-chain hardening

One researcher earned over $130,000 exploiting name collisions between public and private registries at 35 companies — here's how lockfiles and scoping stop it.

Jul 8, 20267 min read