Developer Tools
Upgrading to Python 3.15: what should I check first?
Python 3.15 makes UTF-8 the default file encoding, removes some APIs and changes tarfile behavior. A short checklist for testing the upgrade.
Oct 18, 20263 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedDeveloper Tools
Python 3.10 reached end of life on 1 October 2026: what now?
Python 3.10 is end of life as of 2026-10-01 and gets no more security fixes. Choose 3.13 or 3.14 for the move, then follow these five steps.
Oct 18, 20263 min read
Developer Tools
Why does PyPI say a file is too large, and what can you do?
PyPI limits single files to 100 MB and whole projects to 10 GB by default. See the errors, why yanking does not free space, and how to request an increase.
Oct 18, 20264 min read
Developer Tools
Why does PyPI say a filename has been previously used?
PyPI never lets a distribution filename be reused, even after delete. Why the upload error appears, what the three causes are, and how to release a fix.
Oct 18, 20263 min read
Developer Tools
Push rulesets: block risky files before they reach the repository
GitHub push rulesets can refuse pushes by file path, extension or size across a whole fork network. What they catch, what they miss, and where they apply.
Oct 18, 20263 min read
Developer Tools
What do purl qualifiers like vers, checksum and repository_url mean?
Purl qualifiers add detail such as checksums, download URLs and version ranges. Learn which common keys exist and how to keep them minimal.
Oct 18, 20264 min read
Developer Tools
How do you write a purl for a Debian or Ubuntu package?
A Debian purl uses type deb, the vendor as namespace, and arch and distro qualifiers. Learn the rules and why source packages need arch=source.
Oct 18, 20264 min read
Developer Tools
Should a container image purl use the oci type or the docker type?
Prefer pkg:oci with a sha256 digest for container images, and use repository_url and tag as qualifiers. Here is how oci and docker purls differ.
Oct 18, 20264 min read
Developer Tools
Is pull_request_target safe in an open source repository?
pull_request_target is safe only if it never runs code from a pull request. Learn the pwn request pattern and how to split workflows with workflow_run.
Oct 18, 20264 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.