Introducing GoNexus: Enhancing Reliability for Go Developers

Announcing GoNexus

August 21, 2019
By Joseph Stephens

3 minute read time

Today, Sonatype announces our official Sonatype Go proxy - GoNexus.dev

The Sonatype product team attended GopherCon 2019, and it was clear to us that the excitement around the Go programming language is palpable. It was also clear that the ecosystem has reached that point in its maturity, where developers want more reliable builds and therefore need Go packages to be immutable, predictable and always available.

Successfully running the Central Repository for Java (Maven Central) since 2002, our team at Sonatype understands this problem better than any other company. This year more than 3.7M unique Java open source software components were released into the Central Repository. We're now turning our attention to Go. So far this year, we've contributed Nancy, Goalie, Nexus Repository OSS (now known as Sonatype Nexus Repository Community Edition), and DepShield to the Go community. The open source Nexus CLI is currently being developed in the Nexus community on GitHub, too. GopherCon made us want to do more. GoNexus is the next step to help developers run reliable and reproducible builds.

If you are interested in immutable, re-usable Go modules and using a proxy run by the leading organization in this space, I encourage you to set your GOPROXY environment variable to https://gonexus.dev.

Sonatype Nexus Repository

The Go community announced a great proxy tool called Project Athens, which is currently in beta, and has helped developers transition to Go Mod. Sonatype has a similar product, Nexus Repository Manager, which is the most used universal repository manager and includes support for the Go programming language. I encourage you to download Nexus Repository OSS for free and use GoNexus by creating a proxy repository with remote URL https://gonexus.dev.

Why Use Sonatype Nexus Repository?

Implements the module API
It's open source!
Reduces network traffic as packages are cached locally
Easier to find packages because of the extensive search capabilities
Hosted repositories allow you to share internal packages with other developers and teams
Packages are always available even when your connection is offline

Sonatype Nexus Repository

Sonatype also provides an enterprise-ready edition, Sonatype Nexus Repository, that includes:

Staging functionality - allows you to define a workflow for your builds to control what does and does not make it to production.
Dynamic storage and high availability
World-class professional support

Sonatype Firewall

If you are worried about vulnerable components entering your pipeline / binary repository, then Sonatype Firewall is your solution:

Enable a continuous audit, or take unwanted components out of distribution with quarantine
Automatically stop risky components from entering your application
Receive notifications when unwanted components are quarantined
Block packages that do not meet your licensing requirements

Getting Help

If you have any questions, ask at https://community.sonatype.com or @ us on Twitter: @sonatype.

Written by Joseph Stephens
Product Manager