Developer Tools
How do I set up .npmrc safely on a new laptop?
Set registry and credentials in the right npmrc file, scope tokens to a registry, and keep secrets out of git. A short setup guide for new developers.
Oct 19, 20263 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedDeveloper Tools
How do I see why a package is in my dependency tree?
Use npm ls to print the tree and npm explain to see why a package is included. A first-week guide to tracing unfamiliar dependencies back to their parent.
Oct 19, 20263 min read
Developer Tools
How do I remove an unused dependency safely?
Fewer dependencies mean fewer advisories. A step-by-step way to confirm a package is unused, remove it, prune the tree, and verify nothing broke.
Oct 19, 20263 min read
Developer Tools
How do I read a Dependabot alert as a new developer?
Where to find a Dependabot alert, which fields to read first, and how to decide between updating, asking for help, or dismissing. A first-week guide.
Oct 19, 20263 min read
Developer Tools
How do I monitor the security automation itself? Heartbeats and checks
A silent automation looks the same as a quiet week. Use heartbeats, queue depth, failure counts and an expected volume check to know when it breaks.
Oct 19, 20263 min read
Developer Tools
How do I map scanner severity to ticket priority fields?
Do not copy severity straight into priority. Map severity plus exposure and reachability to your priority scale, with a worked table and exceptions.
Oct 19, 20263 min read
Developer Tools
How do I get started with Safeguard in my first hour?
A one hour plan for a new Safeguard workspace: sign up, connect a repository, run your first scan, read the results, and keep automatic fixes on Manual.
Oct 19, 20269 min read
Developer Tools
How do I get a DOI for a GitHub release with Zenodo?
Link Zenodo to your public GitHub repository and it archives each new release with a DOI. Steps, limits, and what to check before you tag.
Oct 19, 20263 min read
Developer Tools
How do I make my research software citable with a CITATION.cff file?
Add a CITATION.cff file to your repository root and GitHub shows a Cite this repository link. Here is what to put in it and how to keep it accurate.
Oct 19, 20264 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.