We have always been big fans of Dart and what the Google Dart team has been trying to achieve. In fact, Cloudsmith was the first package management product to announce support for Dart packages in private repositories.
With that in mind, we are happy to announce improvements to our Dart package support.
Consulting with the Google Dart team on the Dart SDK 2.15 release, we've added support for native publishing and support for the token add command to auth for pulling packages. These changes open the door to more accessible use of private repositories for Dart packages.
As a result of these improvements, you can use the dart pub token command with your Cloudsmith API Key to configure the Dart client to publish packages directly to your private repositories on Cloudsmith. And you can also use it with a Cloudsmith Entitlement Token if you’d like to provide secure, read-only access to pull packages/dependencies from a private Cloudsmith repository.
Additionally, we now support upstream proxying for Dart. By proxying upstream dependencies, Cloudsmith enables your organization and your build systems to deal with a single point of contact (us) rather than having to build and manage multiple integrations. Dart upstreams is currently a Beta feature, and we'd love for you to try it out and give us your feedback. We intend to add support for caching in the future, which will give you even more control over these dependencies and improved performance. Check out our Upstream Documentation for more information.
We want to ensure best-in-class support for Dart packages on the Cloudsmith platform, and these improvements go towards that end. As always, we welcome your feedback on these changes and anything package management related!
Good news! We've improved the UI and APIs for user management within organizations. Added The people management UI now shows the email addresses of members (redaction configurable). The organization members API can now show unredacted emails (if configured). A new setting for showing unredacted emails was added to the "Global Privileges" org se…
When designing upstream support for Cloudsmith, we always strived to ensure that we could build an understanding of every package available on a remote repository. This information is beneficial, helping inform performance, analysis, and security decisions. With this in mind, we're happy to announce an essential improvement to upstream support for…
Good news! We have added additional functionality to the Cloudsmith API and CLI to enable you to search for dependencies (such as the ever-dreaded log4j) across packages stored within Cloudsmith repositories.
The syntax is dependency:
On 10th December 2021, a critical severity Remote Code Execution (RCE) exploit disclosure for log4j was published, as CVE-2021-44228, affecting versions below 2.15.0. The vulnerability has been coined as Log4Shell. The log4j framework allows Java developers to log data (incl. user-based) in their applications. Is Cloudsmith impacted? In short: No…
After nearly a year of effort in which we designated 2021 as the “Year of Security,” we’re incredibly proud to announce that we are now ISO27001:2013 certified. The certification is an incredible achievement by the team at Cloudsmith and excellent news for all of our customers. What exactly is ISO27001:2013? ISO27001:2013, also known as ISO27001…
One of the features our customers have requested is the ability to sort packages when querying via the Cloudsmith API. Good news everyone - we can now offer that functionality! What does this mean for me? By default we will sort packages by the uploaded date descending (the most recently uploaded package first), but what if you wanted to view w…
By submitting this form, you agree to our privacy policy
