For customers who use Cloudsmith for Dart packages, Cloudsmith now supports caching from upstream repositories including pub.dev, the official package repository for Dart. This simplifies handling of public Dart packages and enables key improvements such as package vulnerability scanning to enhance and better secure your package workflows.
Prior to this release, Cloudsmith would proxy requests for Dart packages to configured upstreams when the package wasn’t present in Cloudsmith, for both the initial request and subsequent requests of the same package. Now, Cloudsmith will source the package from the upstream on the initial request, and serve subsequent requests from the cached package in Cloudsmith.
Direct proxying from pub.dev:
Caching Packages:
See Dart Repository for more information and to get started today.
Cloudsmith now automatically generates SBOMs during package synchronization of container images. This provides a CycloneDX format SBOM accessible via the API, and significantly quickens container image re-scan times. What are SBOMs? SBOMs (or Software Bill Of Materials) serve as an inventory of components comprising a software package. Based on a…
Cloudsmith has extended our support for security scanning to include Dart packages, helping customers who use Cloudsmith for Dart packages ship safe software. Cloudsmith’s security scanning checks for Common Vulnerabilities and Exposures (CVEs). Package vulnerability scanning is a key step in securing your software delivery pipelines, and using pa…
Cloudsmith’s support for Conda repositories now includes the ability to modify Conda repository metadata through repodata patching, giving customers a way to update package dependency constraints without republishing all packages. Repodata patching provides a resolution when updates to a package’s dependencies introduce breaking changes or other i…
If your organization has a policy to rotate API keys, Cloudsmith can now help you enforce this using our API Key Policy, a new policy type for Ultra customers. Using this policy you can: Specify a maximum age for API keys throughout all accounts in your workspace. Enforce optional automatic API key refresh, which will automatically refresh any A…
After a focused period of design and development, the new Cloudsmith web app is now available to all customers at app.cloudsmith.com. The new web app replaces the existing cloudsmith.io, which will be fully decommissioned in June 2025. The new web app is designed to give you a clearer picture of the software flowing into and out of your business:…
Following our announcement of Hex registry support in July 2024, Cloudsmith has extended that support to include upstreams, making Elixir and Erlang package management easier. This support is compatible with any registry that adheres to the v2 registry specification. Highlights Proxying Packages: Directly proxy Hex packages, such as Hex.pm or pri…
By submitting this form, you agree to our privacy policy
