brian_fox - Network

Sustainability of critical oss infrastructure is a pressing issue we must address. Shockingly, only 1% of Maven Central users consume 83% of...

Sustainability of critical oss infrastructure is a pressing issue we must address. Shockingly, only 1% of Maven Central users consume 83% of the bandwidth, many being large organizations that should have better supply chain practices. Taking steps to curb this abuse is crucial. Read more: https://www.sonatype.com/blog/maven-central-and-the-tragedy-of-the-commons

Are you having trouble understanding the graph of your dependencies and where to best make some upgrades to improve your security, legal,...

Are you having trouble understanding the graph of your dependencies and where to best make some upgrades to improve your security, legal, quality posture? Take a look at BomDr from @sonatype . We're trying to make managing your deps fun and not a chore. https://bomdoctor.sonatype.com

It's almost the Log4Shell anniversary so we've fired back up the consumption dashboard:...

It's almost the Log4Shell anniversary so we've fired back up the consumption dashboard: https://www.sonatype.com/resources/log4j-vulnerability-resource-center

We're seeing a little uptick in safe versions in the last few months.