Why Sonatype is acquiring MuseDev
5 minute read time
Sonatype acquired MuseDev, a developer-first source code analysis platform and unveiled the world’s first full-spectrum platform for strengthening.
Read More...
Sonatype Nexus Repository 3.30: Microsoft Azure Blob Storage support for expanded cloud deployments
4 minute read time
Sonatype Nexus Repository Pro users can now manage and deploy their critical infrastructure on Microsoft’s Azure Cloud Platform.
Read More...
Sonatype releases new Sonatype Repository Firewall policy to secure software supply chains from "dependency confusion" attacks
5 minute read time
Sonatype’s new Dependency Confusion Policy Protection using Nexus Firewall and Nexus Repository can now automate dependency confusion protection at scale
Read More...
Namespace confusion: Minimizing risk with Sonatype Nexus Repository
3 minute read time
Nexus Repository (NXRM) can help minimize your risk against namespace confusion with a feature called repository routing rules.
Read More...
The Central Repository stands to support sailors from Bintray - three steps to take now to protect your builds from failing
8 minute read time
We've created a practical guide for Bintray users migrating to the Central Repository to follow and ensure that use and distribution of open source components.
Read More...
What publishers need to know about migrating from JCenter / Bintray to the Central Repository
11 minute read time
A step-by-step guide publishers can follow to easily migrate from Bintray/JCenter to The Central Repository
Read More...
Dear Bintray and JCenter users - Here's what you need to know about the Central Repository
3 minute read time
If you're freaking out about moving Java components into The Central Repository, following JFrog sunsetting Bintray, don’t worry. We’re here for you.
Read More...
CursedGrabber strikes again: Sonatype spots new malware campaign against software supply chains
3 minute read time
Sonatype has determined those behind the CursedGrabber Discord malware family, have published a new malware campaign against software supply chains
Read More...
Sonatype stops software supply chain attack aimed at the Java developer community
9 minute read time
Sonatype removed 3 malicious open-source Java components from Maven Central targeting popular software releases, stopping a software supply chain attack.
Read More...