Contains a Vulnerability Source which connects to Sonatype's OSS Index. Previously, this was the Vor Security Extension.

  • Installation
  • Releases
  • Documentation
  • Pre-Releases

Default Extension Installation

If your product installation can access the internet (specifically the URL), simply navigate to the Admin > Extensions page to browse and install the latest available extension versions.

Offline or Previous Version Extension Installation

For installations that are restricted from accessing the internet, or if you with to install a version other than the latest, extensions can also be installed manually:

  1. Download the desired version of the extension:
  2. Copy the extension file (Sonatype.upack) to the extensions path. Visit the Admin > Advanced Settings page within your product instance to determine where extensions are stored by examining the Extensions.ExtensionsPath setting.
  3. Ensure the file is named exactly Sonatype.upack in the extensions directory, and that no other files with the same name exist in that directory, even with a different extension. For example, make sure to delete an existing Sonatype.inedox file if you are installing Sonatype.upack
  4. Restart the product's Windows service: Admin > Service > Stop then Start (e.g. INEDOBMSVC, INEDOPROGETSVC)
  5. Restart the product's Web application, either the IIS application pool or the Integrated Web Server service: Admin > Service > Restart Web App
  6. Verify that the new extension has been loaded (Admin > Extensions)

Issues tracking, release notes, and downloads are available on the GitHub Releases page. They are also listed below for convenience.



No notes for this release

Download (requires inedox 1.1.1 or newer)



No notes for this release

Download (requires inedox 1.1.1 or newer)



No notes for this release

Download (requires inedox 1.0.5 or newer)



No notes for this release

Download (requires inedox 1.0.0 or newer)

Documentation for this extension is in the process of being migrated to GitHub.

Visit the GitHub Wiki of this extension for documentation, or the Tutorials section for more information.

To access pre-release versions of this extension, you can configure your product installation to use Inedo's public ProGet instance to download extension packages.

To configure your product installation to point to the pre-release feed, visit the Admin > Advanced Settings page within the product installation and set the Extensions.UpdateFeedUrl value to:

This feed has a connector configured to the default URL (i.e., so if there are no pre-release versions, the latest will always be available.