Active Projects

These are our current active Open Source Projects.

API Clients (IQ)

golang python typescript api client
Generated API Clients in Go, Python and Typescript for Sonatype IQ Server Manager
Works with:
Sonatype Developer Sonatype Repository Firewall Sonatype Lifecycle Sonatype Lifecycle

API Clients (Repo)

golang java typescript api client
Generated API Clients in Go, Java and Typescript for Sonatype Nexus Repository Manager
Works with:
Sonatype Nexus Repository Manager

AuditJS

javascript nodejs
Scan JavaScript (node.js inclusive) projects for vulnerable third-party dependencies.
Works with:
Sonatype OSS Index Sonatype Lifecycle

Bach

php composer
Scan PHP and Composer projects for vulnerable third-party dependencies.
Works with:
Sonatype OSS Index

Cargo Pants

rust cargo
Cargo subcommand provides a project bill of materials and identifies vulnerabilities.
Works with:
Sonatype OSS Index Sonatype Lifecycle

Chelsea

rubygems
Scan RubyGems powered projects for vulnerable third-party dependencies.
Works with:
Sonatype OSS Index Sonatype Lifecycle

Cheque

c
Scan C projects for vulnerable third-party dependencies.
Works with:
Sonatype OSS Index

Container (Repo)

arm
Container Image built for ARM for Sonatype Nexus Repository Manager
Works with:
Sonatype Nexus Repository Manager

Jake

python conda pip
Scan Python and Conda environments for vulnerable third-party dependencies.
Works with:
Sonatype OSS Index Sonatype Lifecycle

Nancy

golang
Scan Golang projects for vulnerable third-party dependencies.
Works with:
Sonatype OSS Index Sonatype Lifecycle

Nexus CasC Plugin

java
Nexus CasC is a configuration as code plugin for Sonatype Nexus Repository Manager 3
Works with:
Sonatype Nexus Repository Manager

OysterR

r cran
Scan R code for vulnerable third-party dependencies.
Works with:
Sonatype OSS Index

Sherlock Trunks

java gradle
A Gradle plugin that scans the dependencies of a Gradle project for vulnerabilities.
Works with:
Sonatype OSS Index Sonatype Lifecycle

The CLA Bot

cla
Also known as Paul Botsco - this is our CLA Bot.
Works with: