Application Security
The ultimate guide to creating a secure Python package
A concrete, numbers-first guide to locking dependencies, signing releases, and scanning for CVEs when building a secure Python package.
May 22, 20266 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedCompliance
License compatibility when combining open source components
Open source license conflicts like GPL-Apache incompatibility often surface after merge. Here's why scanners miss them and how build-time enforcement closes the gap.
May 22, 20266 min read
Security
Code Complexity Analysis as a Security Signal, Not Just a Metric
Code complexity analysis measures how tangled your code is, and that number predicts where bugs and vulnerabilities hide. How to measure it and act on it.
May 22, 20266 min read
Security
JavaScript Checker: How to Scan JavaScript Code for Bugs and Vulnerabilities
A JavaScript checker can mean a linter, a type checker, or a security scanner, and you want all three. Here is what each catches and how to wire them into one pipeline.
May 22, 20266 min read
Application Security
Command injection in Python: examples and prevention
Python command injection lets attackers run arbitrary OS commands via os.system() or subprocess. Learn how it works, a real CVE, and how to prevent it.
May 22, 20266 min read
Concepts
What Is a Package Registry?
A package registry is the network service your package manager pulls code from. Here is how registries work, why they are a critical trust boundary, and how to secure what you download.
May 22, 20266 min read
Compliance
Open source license risk in M&A due diligence
Open source license conflicts hide in most acquisition targets' codebases. Here's why manifest-based SCA tools like Mend.io miss them in M&A diligence — and what a real audit needs.
May 22, 20268 min read
Concepts
What is a Build Cache Poisoning Attack
Build cache poisoning plants malicious entries in a shared CI cache so trusted builds unknowingly consume attacker-controlled artifacts. Here's the mechanics and the fixes.
May 21, 20266 min read
AI Security
Venture Capital's Renewed Bet on Agentic AI Security Star...
VC funding for agentic AI security startups hit new highs in 2026, with identity governance, autonomous pentesting, and SOC automation drawing the biggest rounds.
May 21, 20269 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.