My Sonatype | Customer Platform
Malicious PyPI Package: litellm has been compromised, enabling multi-stage credential stealer. With 3M daily downloads, Sonatype detected in <1min. Learn More
Welcome
Latest Releases
Sonatype Lifecycle, Repository Firewall, and SBOM Manager
204.2
Sonatype Nexus Repository 3
3.94.0
What's New?
Introducing Sonatype Guide
Sonatype Guide is our newest addition to your development toolkit. In your browser, it's a search engine and research tool for open-source components. As an MCP server, it's both database and guardrails for your favorite A.I.-powered coding assistant. Guide also has a robust suite of APIs for custom integrations. No matter how you use it, you'll develop more quickly, more safely, and with more confidence.
Office Hours: July 22, 2026
Join us for the next Office Hours of 2026 on July 22, 12:00pm EDT. Ask questions, share ideas, and learn about what's new in the Nexus One platform.
Course: Accelerating Development with Sonatype Developer
Learn how Sonatype Developer can help you identify, prioritize, and remediate open-source risks efficiently, increasing development velocity and reducing time spent on security triage.
Nexus Repository Best Practices
Getting value from Nexus Repository means more than just having it deployed and provisioned. Learn how to reduce friction, boost agility, and work harmoniously with these best practices.
Recent Blogs
OMB Rolled Back the Rules. Security Did Not Get Easier
By: Sonatype on March 10, 2026 OMB
3 min
The U.S. Office of Management and Budget (OMB)'s decision to rescind M-22-18 and M-23-16 and replace them with M-26-05 has been framed as a win for flexibility and a rollback of security theater. That framing is not entirely wrong, but it misses something fundamental about how modern software actually fails. There are pieces of this shift that are directionally correct, and others that risk undoing what little consistency the federal software ecosystem had finally begun to build.
The Evolution of OSS Index in the Age of AI
By: Mitchell Johnson on March 3, 2026 Sonatype Guide
3 min
Developers are writing more code, faster, with the help of generative AI and automation. Tasks that once took days now take minutes. Dependency decisions that were once reviewed manually are now made continuously by pipelines, tools, and AI agents and coding assistants. Attackers have access to the same superpowers. This combination — AI-accelerated development, AI-enabled attackers, and human accountability — has fundamentally changed the problem we're trying to solve.
Power Secure Swift Development at Scale With Sonatype Nexus Repository
By: Aaron Linskens on February 11, 2026 Swift
5 min
As Swift adoption grows, so does the need for a secure, reliable, and scalable way to manage Swift packages. This is where Sonatype Nexus Repository can help.
With expanded support for Swift, Nexus Repository enables organizations to proxy, host, and control Swift packages using the same trusted repository infrastructure they rely on for other ecosystems. The result is a more secure software supply chain and a better developer experience during Swift app development.