Use packages reliably with upstreams for VSTS feeds
May 24, 2018Alex Mullans

Summary
This post introduces the 'upstream sources' feature for Azure Artifacts feeds, allowing users to configure other VSTS feeds or public registries (nuget.org, npmjs.com) as sources for packages. When a package is used from an upstream source, Azure Artifacts saves a copy, ensuring availability even if the upstream source becomes unavailable. This feature also provides a link back to the original upstream package. The post details the setup process for both VSTS-to-VSTS and public registry upstream sources. Additionally, a new 'Collaborator' permission level is introduced for feeds, distinct from 'Contributor' and 'Reader', to manage who can save packages from upstream sources.