Sonatype

Sonatype 2026 State of the Software Supply Chain Report Notes 37x Growth in Unscored CVEs

Sonatype's 2026 State of the Software Supply Chain report documents global CVE count doubling over five years. The report states the number of unscored CVEs has grown 37x during the same period. HeroDevs analysis references Sonatype data showing AI-generated vulnerability reports adding to the noise in security assessments. Sonatype's findings cover over 10 trillion open source downloads across major registries.

Abhishek Chauhan Discusses GCC Innovation at Awfis Event with Sonatype

Abhishek Chauhan, Head of India and Senior Director at Sonatype Inc., joins Sumit Lakhani, CEO of Awfis, and Lalitha JS, Managing Director of Netsmart, on May 18, 2026. The discussion covers India's top talent shift toward GCCs for global innovation leadership. Sonatype participates alongside Awfis and Netsmart in the GCC Edition of The Corner Awfis series. The event highlights Sonatype's India operations role in driving enterprise software strategies.

Sonatype OSS Index Migrates to Sonatype Guide with December 2026 Sunset

Bhagwat Swaroop Speaks as President and CEO of Sonatype at RSAC 2026

Sonatype Hires Performance Marketing Manager Role in 2026

Sonatype Security Research Team Reports New Shai-Hulud npm Package Attack

LLBBL Blog Maps Sonatype Pricing at $6K-$150K+ for Enterprise Supply Chain Security in 2026

Sonatype Integrates Guide with AWS Kiro IDE for Trusted AI Development

Sonatype India Leaders Speak at Indian Chamber of Commerce World Technology Convention

Sonatype Publishes New Malicious Package Detections on May 15 2026

Sonatype Releases Nexus Repository 3.93.0 Patch Fixing UI Freeze in Community Edition

Sonatype Hires Performance Marketing Manager for Remote North America Role

Sonatype Joins Sustaining Package Registries Working Group As Founding Member

Forrester Analyzes OpenAI Daybreak Impact on Sonatype and AppSec Tools

Sonatype Hires People Partner for Remote Colombia Operations

CircleCI Resolves Maven Central Build Failures After Sonatype Rate Limits

Sonatype Participates as Founding Member of Sustaining Package Registries Working Group

Sonatype Hires Performance Marketing Manager for Remote Role

Jamie Hicks Joins Sonatype as VP of Strategic Accounts North America

Sonatype Joins Linux Foundation Registry Working Group

Sonatype Joins Linux Foundation Working Group on Package Registry Sustainability

Sonatype announced its participation as a founding member of the Sustaining Package Registries Working Group under the Linux Foundation on May 11, 2026. The group convenes leaders from public package registries including npm, PyPI, and Maven Central to address financial, operational, and infrastructure challenges in sustaining global-scale open source distribution. Brian Fox, Sonatype's co-founder and CTO, emphasized that registries now function as critical security systems in software builds. The initiative aims to develop shared governance models and funding mechanisms to ensure long-term ecosystem resilience. Sonatype stewards Maven Central, which hosts over 8 million open source components as of April 2026.

Sonatype appoints new CTO from Google Cloud to lead devsecops innovations. Expect big moves in supply chain security. #S

Sonatype appoints new CTO from Google Cloud to lead devsecops innovations. Expect big moves in supply chain security. #Sonatype #LeadershipChange

Controversy at Sonatype: Recent data breach exposed user repos, raising questions on supply chain security irony. Users