Featured Article
New Design, New Features: Maven Central Improvements for Developers
Stop the Low-Quality Contribution Plague
5 minute read time
You’ve heard the phrase. Today we talk about how to actually low quality when contributing to open source projects.
Read More...
Why Companies Should Contribute to Open Source – And How to Do It
7 minute read time
Your company relies on open source projects; giving back to them can reduce tech debt, accelerate innovation, and reduce your developers’ cognitive load.
Read More...
Beyond Coding: Changing Developer Roles
9 minute read time
Developers are increasingly taking center-stage, assuming more responsibilities and tasks. But what does this mean for developers themselves?
Read More...
The Benefits of Remote Work Beyond Avoiding the Coronavirus (COVID-19)
3 minute read time
The advantages we've realized with Sonatype's remote organization are evident. Here, lessons for anyone new to working from home to avoid the Coronavirus.
Read More...
GDPR One Year On: Increasing Demand for "Security By Design"
3 minute read time
GDPR's influence is becoming more and more evident in software development. What comes next for teams in the EU and elsewhere as the policy turns 1?
Read More...
In the Dark about Software Supply Chain Vulnerabilities
2 minute read time
The Barium attacks, revealed earlier this month, highlight new, pervasive tactics that are exceptionally dangerous.
Read More...
Software Composition Analysis: A Matter of Perspective (and Experience)
2 minute read time
The SCA market is young - leaving everyone wrestling with a critical question: is it a security-centric, developer-centric, or a legal-centric endeavor? At Sonatype, we believe it's all of the above.
Read More...
Application Security Risk in 2019: It's All About The Supply Chain
5 minute read time
Cyber criminals are intentionally planting vulnerabilities directly into the global supply of open source components. Heading into 2019, organizations should learn how to run fast enough to harness
Read More...
On the 12th of December the Subcommittee on oversight and investigations released an additional report identifying the core strategies organisations can take to address modern cybersecurity risks.
Read More...