Developer Tools
Cache-Control cheat sheet: no-cache vs no-store and the rest
no-cache does not mean do not cache. A cheat sheet of Cache-Control directives from RFC 9111, freshness rules, Vary and what to set for private data.
Oct 18, 20264 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedDeveloper Tools
How to write a correct package URL (purl) for npm, Maven and PyPI
A purl is pkg:type/namespace/name@version with optional qualifiers. How to write one for npm scoped packages, Maven, PyPI, Debian and containers.
Oct 18, 20263 min read
Developer Tools
How to vet a VS Code extension before installing it
A checklist for judging a VS Code extension: publisher badge, reviews, source repo, license, and what to do if something looks off before you install.
Oct 18, 20264 min read
Developer Tools
How to roll back a bad dependency upgrade merge safely
Step by step rollback of a bad dependency upgrade: git revert for merge and squash commits, lockfile checks, and what to do after the revert.
Oct 18, 20264 min read
Developer Tools
How to read benchmark scores when choosing a small model
Benchmark numbers in model reports are a starting point, not a verdict. Six questions to ask before trusting a score, and how to run your own check.
Oct 18, 20263 min read
Developer Tools
How to read a reachability call path and decide what to do
A reachability finding shows a chain of calls from your code to a vulnerable function. Learn to read it, test it, and decide on a fix or an exception.
Oct 18, 20263 min read
Developer Tools
How to estimate a monthly LLM API bill: a worked example
A step by step method to estimate a monthly LLM API bill, with a worked example using dated public prices and the effect of caching and batch discounts.
Oct 18, 20263 min read
Developer Tools
How to check a dependency before you add it to your project
A short pre-commit routine for new dependencies: do you need it, who maintains it, what it pulls in, and what you will do if it breaks or turns hostile.
Oct 18, 20263 min read
Developer Tools
How prompt caching works: prefix order, expiry and what it saves
Prompt caching reuses a repeated prompt prefix at a lower price. See how the prefix is built, how long entries live, and what a cache read costs.
Oct 18, 20263 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.