News and Notes from the makers of Nexus | Sonatype Blog

Nexus Intelligence Insights:CVE-2020-13935 - Apache Tomcat Websocket - Denial of Service (DoS)

By Akshay 'Ax' Sharma on July 29, 2020 vulnerabilities

July’s Nexus Intelligence Insight takes a deep dive into a Denial of Service (DoS) vulnerability impacting the popular Apache Tomcat Websocket component.

Read More...

Nexus Repo and Datree Integration Deliver Automated Pipeline Control

By Brent Kostak on November 01, 2019 github

Nexus Repository/Datree integration applies policy control on GitHub commits to bring together developer codebase visibility and build artifact management.

Read More...

Activate Your Shield Against Open Source Invasions

By Katie McCaskey on August 09, 2019 open source management

Mike Van Doren, Sonatype Solution Architect, identifies the infinity stones that grant superpowers in the Nexus ecosystem.

Read More...

A World of Infinite Choice in Open Source Software

By Katie McCaskey on July 11, 2019 open source management

The 2019 Software Supply Chain Report explains the development environment we're all living in and what we can learn from exemplar dev teams.

Read More...

Malicious Code Injection Strikes Again as npm Foils $13M Cryptocurrency Theft

By Derek Weeks on June 07, 2019 vulnerabilities

The latest attempt at a cryptocurrency heist demonstrates how open source software components are used throughout the cryptocurrency ecosystem.

Read More...

Build Better Component Practices: Crawl. Walk. Run.

By Sylvia Fronczak on November 06, 2018 component governance

Whether you're just getting started or attempting to take the next step in improving your organization's open source processes, there are lessons you can learn. Sonatype's lead customer success

Read More...

Open Source Governance Hits the C-Suite

By Derek Weeks on April 11, 2018 open source management

The Wall Street Journal’s Adam Janofsky wrote an article entitled, How Companies Can Manage Risks Tied to Open-Source Software*. Coverage of this topic sheds light on a topic for executives, that has

Read More...

42,000 Nexus Repository Managers, and Growing!

By Derek Weeks on November 19, 2014 Cyber Supply Chain Management and Transparency Act

42,000 Nexus Repository Managers, and Growing!

Read More...

Part 2 - [ ________ ] is the Best Policy

By David Jones on August 13, 2014 open source survey

In Part 1, ‘[ ________ ] is the Best Policy, we looked at some of the common aspects of an open source policy and discussed how our recent survey discovered that 41% of people think that policies are

Read More...

The Tipping Point: Human Speed vs. Machine Speed

By Derek Weeks on March 05, 2014 Sonatype Says

What can the financial services industry learn from the U.S. Department of Homeland Security? In this third segment of my blog series on open source component security as it relates to the recently

Read More...

PRODUCTS

Powered by Nexus IQ

Nexus Repository Manager

Research and Free Tools

Pricing

No-Pressure Sales

SOLUTIONS

For Professionals

For Industries

RESOURCES

Content

Sonatype Partners

Community

Upcoming Events

ABOUT US

Sonatype Blog

Nexus Intelligence Insights:CVE-2020-13935 - Apache Tomcat Websocket - Denial of Service (DoS)

Nexus Repo and Datree Integration Deliver Automated Pipeline Control

Activate Your Shield Against Open Source Invasions

A World of Infinite Choice in Open Source Software

Malicious Code Injection Strikes Again as npm Foils $13M Cryptocurrency Theft

Build Better Component Practices: Crawl. Walk. Run.

Open Source Governance Hits the C-Suite

42,000 Nexus Repository Managers, and Growing!

Part 2 - [ ________ ] is the Best Policy

The Tipping Point: Human Speed vs. Machine Speed

Products

Security Research

Solutions

Resources

About