Uncover a Decade of Data

We've compiled 10 years of data to analyze the state of the software supply chain. Dive into trends, risks, and insights that could impact your SDLC.

sticky : sticky

Skip Navigation

Platform
- - Platform overview Automate your software supply chain security
  - Integrations Work in the tools, languages, and packages you already use
Solutions
- - Integrated Innovation Align dev, security, and ops teams to fuel secure deployment
- By Industry
Pricing
Resources
- - Resource Center Articles, videos, and reports that help transform the way you innovate.
Partners
- - Become a Partner Join our extensive Sonatype Partner Network
  - Find a Partner Find and connect with a certified Sonatype partner
Company

Book a Demo

Sonatype Blog

Discover valuable insights on DevOps, Application Security, Software Innovation, Vulnerabilities, Software Supply Chain Management, SBOMs and Sonatype products.

Blog Post

10 years of software supply chains: Navigating the growth, risks, and future of open source

Blog Post

Exploit creator selling 250+ reserved npm packages on Telegram

Blog Post

'cors-parser' npm package hides cross-platform backdoor in PNG files

Blog Post

Russia-linked 'Lumma' crypto stealer now targets Python devs

Filter by

The scale of open source: Growth, challenges, and key insights

Blog Post

The transformation of open source: Lessons from the past decade

Blog Post

ADDO session: Secure your application supply chain on AWS

Blog Post

ADDO session: Building observability to increase resiliency

Blog Post

ADDO session: The state of SBOM, what's coming in standards and regulations

Blog Post

10 years of software supply chains: Navigating the growth, risks, and future of open source

Blog Post

Best practices for authentication and authorization: Yoshiyuki Tabata's keynote at ADDO

Blog Post

Transforming enterprises with generative AI: Pallavi Nargund's keynote at ADDO

Blog Post

Unveiling the trillion dollar engine of innovation: Manuel Hoffmann's keynote at ADDO

Blog Post

A decade of transformation: ADDO and the State of the Software Supply Chain

Blog Post

Revolutionizing software development: Frank Roe's keynote at ADDO

Blog Post

Unmasking the invisible threat: Ilkka Turunen's keynote at ADDO

Blog Post

Simplifying SBOM compliance with Sonatype under India's cybersecurity framework

Blog Post

Counterfeit Lodash attack leverages AnyDesk to target Windows users

Blog Post

Cybersecurity Awareness Month: Building a safer digital world together

1
2
3
...
14

Platform

Solutions

Community

Partners

Company
- Careers
- Contact
- About
- Newsroom
- Trust Center
- Investors
- Press Kit

Subscribe for all the latest software security news and events

Terms of Service
Privacy Policy
Modern Slavery Statement
Event Terms and Conditions
Do Not Sell My Personal Information
Cookie Preferences

Copyright © 2008-present, Sonatype Inc. All rights reserved. Includes the third-party code listed here. Sonatype and Sonatype Nexus are trademarks of Sonatype, Inc. Apache Maven and Maven are trademarks of the Apache Software Foundation. M2Eclipse is a trademark of the Eclipse Foundation. All other trademarks are the property of their respective owners.