Featured Article
New Design, New Features: Maven Central Improvements for Developers
Find and Fix Vulnerabilities in Seconds using GitHub PR Reviews with Line Comments
2 minute read time
Developers Gain Contextual Feedback with Automated Pull Request Commenting
2 minute read time
Struts2 Exploited Again. Did Anyone Bother to Tell You?
5 minute read time
This week I woke up to find several emails from Nexus Lifecycle indicating that the products in my portfolio were potentially vulnerable due to their inclusion of Apache commons-collection. If you
What’s in Your Software
2 minute read time
I can’t tell you how excited I am to be a part of the Sonatype team that is literally reinventing how quality software gets made. As the new guy leading marketing, my first test was to explain
Did You Wake Up to an Alert About the Java Deserialization Vulnerability?
4 minute read time
This week I woke up to find several emails from Nexus Lifecycle indicating that the products in my portfolio were potentially vulnerable due to their inclusion of Apache commons-collection. If you
Legal at DevOps Speed
1 minute read time
Paul is not part of our development team, he doesn’t want to be, and he certainly does not slow them down. But with that said, Paul knows how to work at DevOps speed. He knows legal reviews need to
Open source components, a fine vintage or sour milk?
2 minute read time
The U.S. recently overtook France as the world’s largest wine market. And here at Sonatype, we can proudly say we’ve contributed to this achievement. By not only consuming our fair share of wine but
An Open Discussion on Open Source Review Boards
1 minute read time
The recent FS-ISAC whitepaper, “Appropriate Software Security Control Types for Third Party Service and Product Providers”, reveals the majority of internal software applications created by financial