Open Source
React Bootstrap Icons: Adding Icons Without Adding Risk
React Bootstrap Icons is a convenient SVG icon set for React apps. Here is how to use it and how to keep the dependency from becoming a supply-chain liability.
May 5, 20265 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedBuyer's Guides
Aikido vs Koi: device/browser protection comparison
Aikido Security and Koi Security solve different layers of risk. Heres how they compare on device/browser protection, and where Safeguard fits in.
May 5, 20268 min read
Open Source
react-signature-canvas: A Security and Maintenance Review
A security review of react-signature-canvas: what the component does, its inactive maintenance status, the XSS surface to watch, and how to use it safely.
May 4, 20265 min read
Open Source
react-query (TanStack Query): Package Health and Data-Fetching Safety
The npm react-query package froze at v3.39.3 when the project moved to @tanstack/react-query. Here is how to tell which one you are running, and how to keep server-state caching from leaking data.
May 4, 20267 min read
AppSec
DAST vs Pen Testing: Which One Does Your App Actually Need?
DAST is automated, continuous, and scales; penetration testing is manual, creative, and deep. Here is how they differ and why serious teams run both.
May 4, 20266 min read
AppSec
Free Web Security Scanner: How They Work and What to Use
A free web security scanner can find real vulnerabilities in a web app, but only if you understand what each type actually tests. Here is a practitioner's breakdown.
May 4, 20265 min read
Industry
CISA Secure by Design Pledge: Reading the One-Year Progress Reports
The CISA Secure by Design pledge crossed its one-year mark in May 2025 with over 150 signatories. We analyze the published progress reports and where vendors are quietly falling short.
May 4, 20267 min read
Containers
Docker Compose: Rebuilding Images Correctly (and Catching Stale Layers)
Why docker compose up sometimes runs old code, and how to rebuild images so what runs matches what you edited, including cache, stale layers, and orphaned images.
May 4, 20266 min read
Vulnerability Analysis
MCPwn (CVE-2026-33032): One Missing Auth Check Turned nginx-ui's MCP Endpoint Into Unauthenticated RCE
nginx-ui added MCP support and split it across two HTTP routes. One route shipped without the auth middleware. The result is a CVSS 9.8 unauthenticated takeover, actively exploited, fixed with 27 characters of code.
May 4, 20269 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.