With all the supply-chain attacks going on, we sat down and condensed our advise into notes we publish in the following weeks. We'll start with dependency management, when to update what and how to disable default insecure behavior in common tooling like VSCode or npm. https://crftd.tech/blog/2026-05-30-notes-on-safer-development/