Sonatype and HackerOne Eliminate the Pain of Reporting Open Source Software Vulnerabilities

By Bruce Mayhew on March 21, 2019 Everything Open Source

3 minute read time

Sonatype has teamed up with HackerOne to build The Central Security Project, a pioneering program that brings together the ethical hacker and open source.
Read More...

How to Deploy the Artifacts of a Project to Sonatype Nexus, with Maven

By Eugen Paraschiv on January 03, 2018 Sonatype Nexus

13 minute read time

How to deploy the artifacts of a project to Sonatype Nexus, with Maven. By default, Maven handles the deployment mechanism via the maven-deploy-plugin.
Read More...

GDPR and OSS. How Are They Linked and Why Should You Care?

By Ryan Sheldrake on November 29, 2017 Everything Open Source

3 minute read time

GDPR and OSS. How are they linked and why should you care?
Read More...

Vor Security brings OSS Index to Sonatype

By Brian Fox on June 29, 2017 vulnerability

2 minute read time

Vor Security acquisition, extended language coverage, ossindex.net
Read More...

Heartbleed: The Open Source Vulnerability that Keeps on Giving (and Taking)

By Matt Howard on June 12, 2017 Everything Open Source

2 minute read time

Heartbleed is taking £100,000 from the council more than three years after the fact.
Read More...

Apache Struts Vulnerability: Live Updates

By Matt Howard on March 16, 2017 vulnerabilities

6 minute read time

Attackers are widely exploiting a new vulnerability in Apache Struts2 that allows them to remotely execute malicious code on web servers.
Read More...

Rubyists Rejoice - Nexus Supports RubyGem Repositories

By Brian Fox on December 01, 2014 nexus pro

3 minute read time

Rubyists Rejoice - Nexus Supports RubyGem Repositories
Read More...

Talking Turkey in Texas: Open Source Governance Lags

3 minute read time

Talking Turkey in Texas: Open Source Governance Lags
Read More...

42,000 Nexus Repository Managers, and Growing!

6 minute read time

42,000 Nexus Repository Managers, and Growing!
Read More...