Featured Article
New Design, New Features: Maven Central Improvements for Developers
Cyber-readiness and Changing Federal Government SBOM Requirements
6 minute read time
Upcoming regulatory changes are coming to go from software transparency to better address cyber-readiness at the Federal level and beyond.
Read More...
2023 Predictions: What Will Happen in Software Supply Chain Governance?
8 minute read time
A look at what we're expecting in the coming year, including open source security, software supply chain attacks, regulation, DevOps, and more.
Read More...
Setting Boundaries: How Procurement Relates to Security (Part 1)
4 minute read time
Whether your organization calls it purchasing, requisition, bidding, or business operations, not managing what comes into your company can be expensive.
Read More...
Sonatype CTO shares thoughts following conversations, led by OpenSSF, where industry and government came together to discuss securing open source software.
Read More...
Open Source and Diversity in Tech: Women@Sonatype
8 minute read time
Celebrating International Women's Day (March 8), the Women@Sonatype group discusses community, recruiting, onboarding, inclusion, and beyond.
Read More...
Why Companies Should Contribute to Open Source – And How to Do It
7 minute read time
Your company relies on open source projects; giving back to them can reduce tech debt, accelerate innovation, and reduce your developers’ cognitive load.
Read More...
A Non-Programmer Introduction to the Software Supply Chain (Electron)
3 minute read time
Connecting the larger use by the software industry of component programs to something most people have on their machine right now: The Electron Framework.
Read More...
Software Supply Chains: An Introductory Guide
8 minute read time
Take a closer look at the software supply chain, including what it contains, why it’s important, and how to protect it from vulnerabilities.
Read More...
This npm Package Could Have Brought Down Cloudflare’s Entire CDN and Millions of Websites
5 minute read time
Cloudflare has patched a critical vulnerability in its open source content delivery network, CDNJS, that threatened the security, integrity, and availability of the wider supply chain.
Read More...