<iframe src="//www.googletagmanager.com/ns.html?id=GTM-TT8R4P" height="0" width="0" style="display:none;visibility:hidden">

Sonatype Blog

Stay updated on the latest news from the makers of Nexus

Manfred Moser

Recent Posts by Manfred Moser:

How to Video Training: Open Source Component Management and Intelligence


As a developer I am constantly chasing new tools and enjoy learning new things. I read a lot of blog posts, tutorials and documentation. And I listen to podcasts and attend webinars as well. More and more I find that watching videos of conference and webinar presentations is great.  But even better are shorter, focused videos that give you a  chance to quickly learn something new.  

Sonatype Automated Deployments with Atlassian Bitbucket Pipelines

With the release of Atlassian’s new Bitbucket Pipelines, you can now configure your project to have continuous builds performed in the cloud easily. Powered by the knowledge of Atlassian on how to run large infrastructure for tools such as Confluenceand JIRA Software, Bitbucket Pipelines brings you a simple configuration for your builds, no matter what stack your project is using. Docker containers as the foundation for the platform allow you to customize to your heart’s desire and deliver great performance for the overall system.

Impressions from DevOpsDays Vancouver 2016

DevOpsDays are always a great event for a geek to attend. You get to chat to fellow hackers and coders and therefore people, who actually understand what you are talking about. The vibe that results from these conversations is always amazing. Presenting is definitely a challenge, but great if you can pull it off. Let’s see how I fared at DevOpsDays Vancouver 2016.

Lessons Learned Again #npmgate

The recent events in the world of JavaScript developers and npm definitely caused a storm on twitter and the internet in general. If you want to find out more around the kik package, the trademark threats, the unpublishing of the left-pad package and the resulting breakage of packages and builds everywhere, check out this recap.

No matter what your personal opinion is about who is at fault and what should be done about this – there are definitely a few lessons to be learned. Some will be new to you and old to others, but together they constitute a valuable step forward. If we followed these ideas, npm gate might never have happened the first place:

Don’t Fall for Lawyer Threats Immediately. 

Manufacturing Without a Warehouse = Development Without an Artifact Repository

Can you imagine a large manufacturer like Toyota, Samsung or General Electric managing all their parts without one or numerous warehouses? Probably not, because it's simply inefficient or even impossible to manage.

Nexus 2.11.1 - Why It's Time to Upgrade

TL; DR: The release of Nexus 2.11.1 includes a fix for the security vulnerability CVE-2014-9389.

npm registry support for all!

Continuing our commitment to the open source community we are taking Nexus OSS to another level. After adding NuGet support in Nexus 2.9 for FREE in Nexus OSS (a long time paid feature of Nexus Professional) our engineering team is at it again. I remember when we created the issue tracker ticket to support npm in Nexus over a year ago. Node.js development and usage of npm registries was on the horizon and making its way into companies more and more. Tools like Grunt have only gotten more traction since then.