Malicious Intent: Open Source Developers, Please Protect Your Users
1 minute read time
Pay attention to your own digital security as you would if you were protecting millions of others. Malicious code found in npm package conventional-changelog.
Read More...
The Hijacking of a Known GitHub ID: go-bindata
2 minute read time
the creator of go-bindata deleted their @github account and someone else created a new account under the same name
Read More...
How Many Hosted Repositories Can Nexus OSS Support
1 minute read time
How many hosted repositories an Nexus OSS support?
Read More...
In keeping with our long standing commitment to open innovation — Sonatype is excited to add unique value to the Grafeas community so organizations everywhere.
Read More...
Brian Fox: What does Sonatype do? What do I do all day?
1 minute read time
Many of my friends and most of my family struggle to understand what it is Sonatype does and therefore what I do all day.
Read More...
Vor Security brings OSS Index to Sonatype
2 minute read time
Vor Security acquisition, extended language coverage, ossindex.net
Read More...
Struts2 Exploited Again. Did Anyone Bother to Tell You?
5 minute read time
This week I woke up to find several emails from Nexus Lifecycle indicating that the products in my portfolio were potentially vulnerable due to their.
Read More...
Did You Wake Up to an Alert About the Java Deserialization Vulnerability?
4 minute read time
This week I woke up to find several emails from Nexus Lifecycle indicating that the products in my portfolio were potentially vulnerable due to their.
Read More...
Rubyists Rejoice - Nexus Supports RubyGem Repositories
3 minute read time
Rubyists Rejoice - Nexus Supports RubyGem Repositories
Read More...