Featured Article

This npm Package Could Have Brought Down Cloudflare’s Entire CDN and Millions of Websites

By Ax Sharma on July 16, 2021 vulnerabilities

Cloudflare has patched a critical vulnerability in its open source content delivery network, CDNJS, that threatened the security, integrity, and availability of the wider supply chain.

Read More...

Ann Winblad Reflects: The Rise of Software

By Derek Weeks on January 04, 2018 Software Supply Chain

Imagine this: the 5 U.S. tech companies are annually investing $60 billion in R&D - close to the non-defense R&D budget of U.S. Government.

Read More...

How a Software Bill of Materials Uncovers Known Vulnerabilities

By Derek Weeks on April 30, 2015 Cyber Supply Chain Management and Transparency Act

How a Software Bill of Materials Uncovers Known Vulnerabilities

Read More...

Sonatype and Bamboo: Improving Your Builds

By Derek Weeks on March 03, 2015 Software Supply Chain

Sonatype now provides native Atlassian Bamboo support to improve the quality of your build outputs. Sonatype provides instant analysis of open source components used in every Bamboo build and alerts

Read More...

Evaluating OSS Logistics Solutions? Consider These 9 Tips.

By Derek Weeks on February 24, 2015 Sonatype vs. Black Duck

The massive reliance on open source components has created new challenges for managing the speed, cost, and risks of continuous delivery in today's software development.

Read More...

The Software Supply Chain Piques Interest

By Derek Weeks on February 09, 2015 Cyber Supply Chain Management and Transparency Act

As we looked back at what our readers found most intriguing in the past year, we found one central theme: managing their software supply chain. Our readers wanted to know in a continuous world, where

Read More...