Tag
sca-code
Safeguard articles tagged "sca-code" — guides, analysis, and best practices for software supply chain and application security.
2 articles
Supply Chain
SCA Code: What Composition Analysis Actually Reads in Your Repo
A concrete look at which files SCA tooling actually parses in a repository, how it builds a dependency tree, and why SCA is required even when your own code is clean.
Apr 2, 20255 min read
Licensing
Copyleft Licenses: Strong vs Weak, and Why It Matters
Copyleft licenses aren't one category — the gap between GPL-style strong copyleft and LGPL-style weak copyleft decides whether linking a library obligates you to open your own code.
Sep 17, 20246 min read