Is “the public cloud” really the best place for your source code? According to Gartner, over 90% of organizations plan to embrace hybrid- or multi-cloud strategies to mitigate the risks …

ProGet 2022 has been released! We’ve made a lot of improvements, but some of the most exciting changes are the revamped Software Composition Analysis (SCA) features. Not only are Vulnerability …

I'm excited to announce that we’ve just released Otter 2022, and that the first prerelease of ProGet 2022 will be shipping later this week. In this article, I'll talk about: …

Python was ranked the second most popular coding language in a 2021 GitLab survey, raising from fourth place in 2014. What is causing this upward trend? Any Python developer will …

Python is really powerful and relatively easy to learn - but that doesn't mean that everyone can just run your Python scripts. There's a bit of a learning gap, even …

"It works on my computer." Troubleshooting the executable of the latest application on an end users computer (be they co-worker, team lead, or high-level stakeholder) may be over with Microsoft's …

I’m probably not the only one guilty of a Pull and Pray. Yknow, when you clone your application using git, install the dependencies with pip, and pray it all works …

NuGet.org is the best place to get NuGet packages and jump-start your projects, but how can you quickly vet content when time is tight? Developers are always on the lookout …

PyPI admins try their best to identify and remove malicious Python packages, but many inevitably slip through. Python package aws-login0tool was recently discovered to be a malicious package attempting to …

Did you hear about the malicious PyPI package that collects environment details and sends the info to an unknown webservice? Or the Trojan horse one that installs, fetches a exe …