user

Inedo Blog


Navigation
Featured

Inedo

Our First Annual “State of Software Supply Chain” is Now Available

Posted on March 25th, 2024.

In the past few years, we’ve all seen major cybersecurity drama like Log4J and SolarWinds shake up the open-source world. ProGet’s been on this, with features like vulnerability scanning. But those headlines? They made us feel it’s time to kick our security game up a notch. So, we’re planning to roll out ProGet...

Featured

Chocolatey

How Licenses Work with Chocolately

Posted on March 22nd, 2024.

Free and open-source tools like Chocolatey have made it a breeze for end-users to install and upgrade applications on Windows machines without needing a centralized tool. However, when using any kind of “free” tool, it’s critical to consider license compliance. This can get a bit tricky with Chocolatey. In this...

Featured

NPM

How to Handle npm Dependencies with Lock Files

Posted on January 16th, 2024.

Working with Node.js and npm? While you’ve probably wrestled with npm dependencies already, understanding these alone is just scratching the surface. Have you heard of “dev-only dependencies”? Or how about “lock-files” for that matter?  While npm handles dependency and package management, mastering it...

Featured

NPM

Exploring npm Package Vulnerabilities and Effective Auditing

Posted on January 9th, 2024.

Seen scary vulnerability alerts when you’re coding with npm packages? Worried about the security of your JavaScript apps due to the latest exploit scare? When you build JavaScript apps, you often use npm packages for managing libraries. Keeping these packages safe for production is super important. I’m guessing you probably...

Featured

NPM

npm Package Approval Flows & Connectors

Posted on December 7th, 2023.

Are you deploying applications to production with packages directly sourced from npmjs.org? This is a common practice for many organizations, with npmjs.org being a popular repository among developers and all. However, with this comes a bunch of stuff you’ll need to watch out for. With npm Packages, your mileage may vary...

Featured

NPM

Making Sense of npm Package Licenses

Posted on November 30th, 2023.

Are you using npmjs.org for all your JavaScript packages? Chances are you are, right? It’s pretty common to include them in your dev projects. But when it comes to package licenses, how closely are you really keeping an eye on them? With over 100 packages in any given project, each with its own license, it’s totally...

Featured

Python

Deploying Python Using Docker: The Easy Way

Posted on November 28th, 2023.

CI/CD is one of the best development processes around; so you shouldn't be surprised it works well with Python! Read our post to learn a great way to get started.

Featured

Inedo

CRAN (R) Feeds Come to ProGet!

Posted on November 27th, 2023.

When you upgrade to ProGet 2023.23, you may notice that you can create CRAN Feeds along with the existing, extensive list of supported feeds. This new feed type was borne out of a feature request from our user community, and we’re happy to finally implement these in ProGet. A CRAN feed is used for R packages, which are used...

Featured

Python

Why You Should Automate Your Python Tests with CI/CD

Posted on November 15th, 2023.

Picture this: a fantastic Python app with a growing number of tests, employing either unittest or pytest. Running pytest test_*.py helps you perform unit tests and protects your code from breaking, ensuring your app remains stable even when you update dependencies using pip install --upgrade package_name. Best part? You can kill any bugs...

Featured

Inedo

ProGet Debian & Linux Feeds: A Feature Refresh

Posted on November 10th, 2023.

After upgrading to ProGet 2023.22, you may have noticed that your Debian feeds are now called “Debian (Classic)” feeds. And if you create a new Debian feed, it’ll be listed as a “Debian (New)” feed. This maintenance release also includes a new feed type for Alpine Linux (APK) Packages, and support for...