When AI Writes Code, Who Governs the Dependencies?

When AI Writes Code, Who Governs the Dependencies?

The Department of War'sCall for Solutions on AI-enabled coding capabilities (CDAO_26-01) arrives at exactly the right moment. Today's AI coding assistants have moved beyond experiments in productivity to becoming the basis for ...

Autonomous Development and AI: Speed vs. Security

AI-assisted development is changing how software gets built. What began as a productivity boost is quickly becoming something bigger ...
Grounded Intelligence Is Key to Safe AI Software Development at Scale

Grounded Intelligence Is Key to Safe AI Software Development at Scale

One experience has become nearly universal as AI systems move deeper into software development, their confidence when they're wrong ...
Trust At Scale: The Commons, Threats, and AI in the Loop | Sonatype

Trust At Scale: The Commons, Threats, and AI in the Loop | Sonatype

Dependency management used to be a private embarrassment: an Ant script, a /lib folder, and classpath roulette. You could ship anyway, and the consequences mostly stayed inside your org.  ...

5 reasons to not miss Sonatype at RSAC 2025

RSA Conference (RSAC) brings together cybersecurity practitioners from across the globe to learn about the latest cybersecurity defense strategies and tools, connect with industry peers, and share knowledge about the threat landscape ...
Protecting the software supply chain: Insights from our expert panel

Protecting the software supply chain: Insights from our expert panel

As software grows increasingly complex, ensuring the security of your software supply chain remains a critical priority ...
Wrapping up a decade of insights from the State of the Software Supply Chain

Wrapping up a decade of insights from the State of the Software Supply Chain

Sonatype's 10th annual State of the Software Supply Chain report marks a transformative decade for open source software ...
From risks to resilience: Best practices for software supply chain security

From risks to resilience: Best practices for software supply chain security

As software supply chains evolve in complexity, managing security risks has become an ever-changing challenge. New threats emerge daily, driven by rapid innovation and the heavy reliance on open source components ...

Optimizing efficiency and reducing waste in open source software management

As the use of open source software (OSS) continues to grow, so do the challenges around maintaining security and efficiency in software dependency management ...