Security
MIT-Lizenz: Was sie erlaubt und was kommerzielle Nutzung bedeutet
Die MIT-Lizenz ist eine der freizuegigsten Open-Source-Lizenzen und erlaubt auch die kommerzielle Nutzung. Wir erklaeren Pflichten, Grenzen und Risiken.
May 1, 20265 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedSecurity
ng-bootstrap: Using and Securing Angular's Bootstrap Widgets
ng-bootstrap gives Angular apps native Bootstrap widgets with no jQuery dependency. Here is how to keep it current and where the real security work actually lives.
May 1, 20265 min read
Security
nginx/1.21.5: Which CVEs Affect It and How to Patch
If your Server header reads nginx/1.21.5, you are running an old mainline release. Here is what it is vulnerable to and the safe versions to move to.
May 1, 20265 min read
Security
The DevSecOps Process, Explained Stage by Stage
A DevSecOps process bakes security into every step of the software delivery lifecycle instead of bolting it on at the end. Here is what each stage actually looks like.
May 1, 20266 min read
Security
Copyleft vs Copyright: What the Difference Means for Your Dependencies
A practical breakdown of copyleft vs copyright, how copyleft licenses like the GPL actually work, and why the distinction shows up in your software bill of materials.
May 1, 20265 min read
Security
How to Check Website Vulnerability: A Practical Guide
To check website vulnerability properly you combine automated scanning of the running app with dependency analysis of what it's built from. Here's a workflow that covers both.
Apr 30, 20266 min read
Security
NVD Meaning: What the National Vulnerability Database Actually Does
The NVD is the U.S. government's repository of vulnerability data, built on top of the CVE list and enriched with severity scores and affected-version details. Here is what that means in practice.
Apr 30, 20265 min read
Security
CVE-2022-37601: Prototype Pollution in loader-utils Explained
CVE-2022-37601 is a prototype pollution flaw in the webpack loader-utils package. Here is what it affects, how it works, and how to remediate it.
Apr 30, 20265 min read
Security
Fix My Java Code: A Practical Guide to Finding and Fixing Security Bugs
"Fix my Java code" usually means a security or dependency problem. Here is a repeatable way to find the real fault, fix it, and stop it from returning.
Apr 29, 20266 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.