Sonatype Logo dark

Platform
- Products
- Why Sonatype
- Accelerate Pipelines with the World's Leading Artifact Repository Manager
  
  Try It Free
- Explore solutions for you
Solutions
- OSS Management
- Developer Solutions
- Industry
- Sonatype Named a Leader in Forrester Wave™ for SCA Software
  
  Read Report
Pricing
Resources
- Resources
- Customer Resources
- Developer Community
- Research Vulnerabilities and Find the Safest Components for AI-Driven Development
  
  Get Started Free
Company
- Company
  - About
  - Customer Stories
  - Events
  - Newsroom
  - Careers
  - Blog
  - Contact Us
- Partners
- Contact Us
  
  Speak to a Software Supply Chain Expert
  
  Contact Us
Login Contact Us Book a Demo

Login Contact Us Book a Demo

This is a search field with an auto-suggest feature attached.

There are no suggestions because the search field is empty.

open source policy Posts

Filters

Search

Topics

AI

Application Security

DevOps

Malware & Vulnerabilities

Regulations & Compliance

SBOM

Software Development

featured image for The Last Mile Problem: AI Can Write Code, but Only Policy Can Ship It

Blog Post

The Last Mile Problem: AI Can Write Code, but Only Policy Can Ship It

Read More

featured image for Government Asks: What's in Your Software?

Blog Post

Government Asks: What's in Your Software?

Read More

featured image for Automated Nexus Reports on Licenses, Security, and More

Blog Post

Automated Nexus Reports on Licenses, Security, and More

Read More

featured image for Legal at DevOps Speed

Blog Post

Legal at DevOps Speed

Read More

featured image for 42,000 Sonatype Nexus Repository Instances, and Growing

Blog Post

42,000 Sonatype Nexus Repository Instances, and Growing

Read More

featured image for Who Is Nigel Simpson? Lessons of Open Source Governance

Blog Post

Who Is Nigel Simpson? Lessons of Open Source Governance

Read More

featured image for Part 2 - [ ________ ] Is the Best Policy

Blog Post

Part 2 - [ ________ ] Is the Best Policy

Read More

featured image for Two AppSec Questions Always Asked

Blog Post

Two AppSec Questions Always Asked

Read More

featured image for Open Source Development Survey: Making Results Matter

Blog Post

Open Source Development Survey: Making Results Matter

Read More

featured image for An Open Discussion on Open Source Review Boards

Blog Post

An Open Discussion on Open Source Review Boards

Read More

featured image for Secure From the Start: Combining Open Source Policies, Practice, and Tools

Blog Post

Secure From the Start: Combining Open Source Policies, Practice, and Tools

Read More

Platform

Nexus One Pricing Nexus Repository Firewall Lifecycle Guide SBOM Manager Maven Central

Why Sonatype

Compare Sonatype Open Source Intelligence Best SCA Tools Best Malware Protection Tools Best Artifact Repository Solutions Best SBOM Compliance Solutions

Resources

Resources Center Blog Product Tours Webinars Customer Stories Analyst Reports Research

Developer

Integrations Free Nexus Repo Download OSS Component Search MCP Server Security Advisories

Customer Resources

My Sonatype Documentation Support

Company

About Careers Partners Newsroom Trust Center

Contact Us

X social logo
LinkedIn social logo
Facebook social logo
YouTube social logo
GitHub social logo

Terms of Service
Privacy Policy
Modern Slavery Statement
Event Terms and Conditions
Do Not Sell My Personal Information
Cookie Preferences
Trust Center

Copyright © 2008-present, Sonatype Inc. All rights reserved. Includes the third-party code listed here. Sonatype and Sonatype Nexus are trademarks of Sonatype, Inc. Apache Maven and Maven are trademarks of the Apache Software Foundation. M2Eclipse is a trademark of the Eclipse Foundation. All other trademarks are the property of their respective owners.