Sonatype CLM - Sonatype
- Winner In:
- Best Governance, Risk and Compliance Solution
Sonatype is the maker of Component Lifecycle Management (CLM) products and information services that enable organizations to realize the promise of agile, open-source software development while avoiding security, quality and licensing risks. Sonatype operates the Central Repository, the industry's primary source for open-source components, housing more than 400,000 components and serving more than 7.5 billion requests per year from more than 60,000 organizations. As such, only Sonatype has a view into how, and what components are being used by organizations to build mission-critical software. The company has built a sophisticated infrastructure for mining virtually everything knowable about a given Java component. Sonatype's event-driven knowledge engine brings together information from the Central Repository coupled with public and private metadata resources and delivers this knowledge directly into the tools that developers and development managers use every day via the Insight platform. Sonatype Insight brings real-time component intelligence to the CI server with Insight for CI; to the repository manager with Insight for Nexus and Nexus Professional; and with Insight Application Health Check. The company also provides commercial versions of popular Java development infrastructure products including Apache Maven, Nexus, Hudson, and m2Eclipse.