Nexus Repository
Your Outdated Repository Still Works, But It May Not Be Safe
Repositories have long served as the backbone of software infrastructure, sitting between developers, CI/CD pipelines, public registries, and production releases. Today, the most sophisticated attackers have set their sights on developers ...
Q1 Updates in Nexus Repository: More Formats, Stronger Operations, and a Better Day-to-Day Experience
If you are responsible for keeping software delivery moving, more ecosystems usually mean more overhead ...
Modernizing Nexus Repository: Moving Beyond OrientDB
If you're running Sonatype Nexus Repository or Sonatype Nexus Repository Community Edition (formerly known as Nexus Repository OSS) on OrientDB, you're operating on a legacy database architecture that is no longer aligned ...
Is Your Repository Ready for What’s Next?
Most software teams don't start out planning to adopt an enterprise artifact repository ...
Power Secure Swift Development at Scale With Sonatype Nexus Repository
From its beginnings as a language for Apple platforms, Swift Package Manager has expanded its reach considerably. It now powers a wide range of mobile, desktop, and server-side applications, as well as ...
Secure, Reliable Terraform At Scale With Sonatype Nexus Repository
Terraform has become the de facto standard for infrastructure as code (IaC). From cloud-native startups to global enterprises, teams rely on Terraform to define, provision, and manage infrastructure with speed and consistency ...
Free isn’t free: The hidden costs of tooling decisions in open source infrastructure
When I first wrote about the tragedy of the commons and Maven Central, I called attention to a startling reality: a small percentage of users — mostly large enterprises — were unknowingly ...
CVE-2022-31289: Neither Bug nor Vulnerability
On June 11, a cyber security analyst published a blog post alleging that he had discovered a vulnerability in Nexus Repository OSS 3.37.3-02 ...
New Developer Tools for Open Source Dependency Management
Sonatype's focus on developers brings more insights into software dependencies, clearer policy exceptions, and support for PHP users. This Nexus platform update will help developers more easily remediate vulnerable open source usage ...
