We're excited to announce that Cloudsmith now supports Conda packages. Conda is a cross-platform, language-agnostic binary package manager. It is the package manager used by Anaconda installations. Cloudsmith provides support for both public and private repositories for Conda.
Cloudsmith's support for Conda is currently in Invitational Beta. If you are interested in being an early tester, email us at support@cloudsmith.com and we’ll get you access.
We're very pleased to announce that NuGet is the latest package format to support upstream caching and proxying. With upstream proxying, Cloudsmith will allow NuGet clients configured to use your repository to see and download your existing repository packages, as well as all those defined in any connected upstream repositories. When upstream cac…
We have always been big fans of Dart and what the Google Dart team has been trying to achieve. In fact, Cloudsmith was the first package management product to announce support for Dart packages in private repositories. With that in mind, we are happy to announce improvements to our Dart package support. Consulting with the Google Dart team on the…
Good news! We've improved the UI and APIs for user management within organizations. Added The people management UI now shows the email addresses of members (redaction configurable). The organization members API can now show unredacted emails (if configured). A new setting for showing unredacted emails was added to the "Global Privileges" org se…
When designing upstream support for Cloudsmith, we always strived to ensure that we could build an understanding of every package available on a remote repository. This information is beneficial, helping inform performance, analysis, and security decisions. With this in mind, we're happy to announce an essential improvement to upstream support for…
Good news! We have added additional functionality to the Cloudsmith API and CLI to enable you to search for dependencies (such as the ever-dreaded log4j) across packages stored within Cloudsmith repositories.
The syntax is dependency:
On 10th December 2021, a critical severity Remote Code Execution (RCE) exploit disclosure for log4j was published, as CVE-2021-44228, affecting versions below 2.15.0. The vulnerability has been coined as Log4Shell. The log4j framework allows Java developers to log data (incl. user-based) in their applications. Is Cloudsmith impacted? In short: No…
By submitting this form, you agree to our privacy policy
