webpack
Safeguard articles tagged "webpack" — guides, analysis, and best practices for software supply chain and application security.
18 articles
Is uglifyjs-webpack-plugin Safe to Use in 2025? What to Migrate To
uglifyjs-webpack-plugin is deprecated and built on the unmaintained uglify-es. Here is why you should migrate to terser-webpack-plugin and how to do it cleanly.
What Is react-server-dom-webpack? A Security Guide
react-server-dom-webpack is the low-level React Server Components binding meta-frameworks build on. Here is what it does and where the security risks actually live.
serverless-webpack: Secure Bundling for Lambda Functions
serverless-webpack bundles your Lambda handlers with Webpack so each function ships only the code it needs. Here is how it works and the supply chain risks to watch when you adopt it.
awesome-typescript-loader: Why to Migrate Off It
awesome-typescript-loader is an unmaintained webpack loader for TypeScript. Here is the security case for migrating to ts-loader and how to do it cleanly.
Webpack vs Rollup vs esbuild: A Security Comparison
Choosing a bundler is usually about speed and features. Here is how Webpack, Rollup, and esbuild compare on the dimension that matters most for supply chain security.
The Security Implications of Package Bundlers
Bundlers transform your code and dependencies into production artifacts. The security implications of this transformation are significant and widely overlooked.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.