FIPS Package Dependency Management
Packaging now standard, dependency proxy next?

Packaging now standard, dependency proxy next?

5/10/2019 · GitLab

What this post added

This post announces the upcoming Dependency Proxy feature, which will enhance package management security and auditability by allowing users to block and delay suspect packages and trace vulnerable package usage. It also positions GitLab's existing integrated package management (Docker, Maven, NPM) and its broader DevOps lifecycle integration as a competitive advantage against GitHub's new package registry.

Read the original post ↗