Software Packages, Do We Even Need Them?
6 minute read time
Explore the evolution of package managers & the benefits of binary packages in software ecosystems. Learn how they enhance DevOps, security, & efficiency.
Read More...
Supply Chain Security Inside and Out
3 minute read time
Every organization needs to safeguard their SDLC. Take a look at two key aspects of ensuring external and internal security for your software supply chain.
Read More...
Power Up Your Dependencies: The Parallels of SBOMs and Mario Kart
7 minute read time
BOM Doctor streamlines SBOMs, optimizes open source choices, and boosts security. How does it compare to Mario Kart? Read on to find out.
Read More...
How to Convert Your SBOM Between SPDX and CycloneDX Formats
7 minute read time
A step-by-step guide on how to convert between SBOM formats using tooling from the official repositories of SPDX and CycloneDX.
Read More...
Sonatype Repository Firewall is an Easy Solution for a Big Problem
6 minute read time
Discover Sonatype Repository Firewall's AI-driven protection for SDLCs, blocking malicious components and ensuring a more secure software supply chain.
Read More...
Post-Conference Tech Spec: Why Building Your Ship (Application) with Raw Materials is a Bad Idea
12 minute read time
Get all the details of the presentation that Jamie Coleman, Developer Advocate on Sonatype’s Developer Relations team, gave at Voxxed Days Zurich 2023.
Read More...
Visualize Your Open Source Governance With BOM Doctor
5 minute read time
Discover BOM Doctor, a free tool that simplifies open source dependency management with world-class research insights and powerful visualizations.
Read More...
Sonatype Lifecycle Enhancements Boost Speed, Security, and Productivity
5 minute read time
Sonatype Lifecycle’s new feature enhancements elevate security posture, developer productivity, and operational excellence. Read on for the full details.
Read More...
Manage Open Source Risk With Improved Malware Detection
5 minute read time
Malware targeting developers remains a major concern. Learn what your organization can do to keep cybersecurity risks out of your development pipeline.
Read More...