Sonatype, the chief commercial supporter of the open-source Maven project, is working with Oracle to bring Java.net project artifacts to the Maven Central Repository, which the company administers for ...

As software development teams get larger, application packaging and deployment tasks become much harder. Handwritten scripts and low-level JDK utility calls just don't scale as teams grow, which is ...

Hot on the heels of Oracle's decision to move the open-source, Java-based continuous integration (CI) server Hudson to the Eclipse Foundation, Sonatype, the leading commercial supporter of the ...

Google has released the second version of its vulnerability scanner for open-source projects, which now performs in-depth analyses in complex projects and containers. It also supports Java projects ...

"As a new and significantly more aggressive wave of npm supply chain malware, Shai-Hulud 2 combines stealthy execution, ...