About Sonatype

Sonatype in the News

Actionable Control For Open Source Components

Published: February 22, 2012 08:35


Sonatype has released the Nexus Professional 2.0 open-source repository manager. The new iteration now includes more "actionable" information about the open-source components used in any development project.

This action-centric approach is designed to provide insights into component security and licensing. The product also includes the Nexus Availability Architecture and the ability to manage both Java and .NET components from a single Nexus repository.

"Thousands of development shops rely on Nexus to reduce build times, improve collaboration, and increase control of open-source artifacts," said Jason van Zyl, CTO and founder of Sonatype. "Sonatype Nexus Professional 2.0 adds a whole new dimension to the repository market. Now development teams can know far more about the contents of their repositories with integrated security, licensing, and popularity information."

The company says that component-based development projects that consume or need to provide binary software artifacts have turned to Sonatype for an efficient, stable, and scalable system to manage their software artifacts. The new release includes branded modules like "Repository Health Awareness" — a component report to identify problematic components throughout the application development process and into production.

Later this year, Sonatype says that it will release Sonatype Insight for Nexus, a plug-in that combines real-time security and licensing information with a rules engine to enable effective governance of component usage. Combined with Sonatype Nexus Professional, this new plug-in will enable the automated management of white and black lists based on a variety of component information including license type, security vulnerabilities, and quality metrics.

With the new release, developers are promised options to customize their repositories with less effort using a simplified plug-in API, while more flexible licensing for plug-ins serves to enhance the overall plug-in ecosystem by encouraging more community contributions. The open-source version of Nexus offers summary repository health awareness data to make better decisions about artifact use during development.

Dr. Dobbs