We are delighted to announce both upstream proxying and caching for R packages. Together, they mean a simpler, more reliable integration of third-party packages into your development process. Better software, faster, and more secure. π
Upstream proxying
In the simplest terms, upstream proxying means Cloudsmith is now your single point of contact for all R packages or dependencies. β¨ By proxying upstream dependencies located in CRAN (the public repository for R packages) through Cloudsmith, your organization, and your build systems, have a single point of contact (us) rather than having to build and manage multiple integrations.
This process is completely transparent and controllable by you, the Cloudsmith customer. You determine ahead of time which repositories you want Cloudsmith to check, and the precedence or priority between them.
Caching upstream packages
In addition to proxying R packages from an upstream, you can also configure Cloudsmith to cache those packages. With caching enabled, Cloudsmith locates, downloads, and stores dependencies within your Cloudsmith repository. So in other words, rather than act as a go-between Cloudsmith does the whole job.
This has many benefits, including:
π Guaranteed great performance. Cloudsmith ensures lightning-fast delivery to any location on the globe - not something you can take for granted when integrating packages from public repositories.
π‘ Control: storing packages and dependencies within Cloudsmith gives you a greater ability to scan for vulnerabilities, check licensing implications, and monitor where and how packages are used. These things are not possible (or are at least difficult) when integrating straight from public repositories.
Caching gives you all these advantages, but you can still define when Cloudsmith goes looking for a new version of any given package before bringing it into your private repository, so you lose no control when it comes to precisely how Cloudsmith and CRAN interact.
Read more on on getting started with proxying and caching with Cloudsmith in our documentation.
Happy packaging! π