testing
Safeguard articles tagged "testing" — guides, analysis, and best practices for software supply chain and application security.
23 articles
Application Fuzzing Explained: Finding Bugs Before Attackers Do
Application fuzzing throws malformed and unexpected input at your code to surface crashes, memory errors, and logic flaws automatically. Here is how it works and how to run it.
Is supertest npm Safe to Use? A Security Review for Node Testing
A security-minded review of supertest npm, the SuperAgent-driven HTTP testing library: where it fits, what its dependency surface looks like, and how to keep test code from leaking into production risk.
mocha npm: Security Review and Safe Usage
The mocha npm test framework runs only code you write, so its direct risk is low, but its dependency tree generates npm audit noise worth understanding.
React 18.3: The Safe Stepping Stone to React 19
React 18.3 is functionally identical to 18.2 but adds deprecation warnings for React 19. Upgrading through it is a security move as much as a compatibility one.
msw (npm): Mock Service Worker Without Leaking Mocks Into Production
The msw npm package is a superb API mocking tool, and its main security risk is operational: shipping a service worker or a mock server into production.
Python MagicMock Security: Keeping Test Doubles Honest
Python's MagicMock makes tests fast and isolated, but the same auto-magic that makes it convenient can hide security regressions. Here is how to use it without lying to yourself.
How to Test Your Signing Pipeline End to End
Build a repeatable end-to-end test harness for your signing pipeline that proves artifacts are signed correctly and that verification fails when tampered.
Disaster Recovery Testing Methods That Actually Prove You Can Recover
A walk through the disaster recovery testing methods teams rely on, from tabletop walkthroughs to full failover, and how to pick the right one for each system.
What Is an API Security Tool and How Do You Actually Choose One?
An API security tool inspects, tests, and monitors your APIs for the flaws attackers hunt for. Here is how the categories differ and how to pick the right one.
@angular-builders/jest: Setup and Dependency Security
@angular-builders/jest lets you run ng test with Jest instead of Karma. Here is how it works, the version-alignment rule that trips teams up, and how to keep its dependency tree secure.
eslint-plugin-jest-dom: What It Secures and What It Does Not
eslint-plugin-jest-dom enforces better jest-dom assertions, but as a dev dependency it also lives in your supply chain. Here is where its real security value and its real risk both sit.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.