Chocolatey's publicly-available community packages are a great resource for personal use, and help you quickly install just about all the software you'd ever need on Windows. But they're definitely not …

Can you spot the difference between colorama and colourama? Sure, one is American English and the other is aimed toward British-English users. One of these is a malicious python package …

When you evaluate self-hosted alternatives to “the public cloud” for your source code, you'll run into a huge list of tools. After a bit of research, you'll discover that, outside …

We've made a lot of improvements to Vulnerability Scanning in ProGet 2022. Not only is it simpler to configure, but it's integrated with the new Software Composition Analysis (SCA) features …

Is “the public cloud” really the best place for your source code? According to Gartner, over 90% of organizations plan to embrace hybrid- or multi-cloud strategies to mitigate the risks …

ProGet 2022 has been released! We’ve made a lot of improvements, but some of the most exciting changes are the revamped Software Composition Analysis (SCA) features. Not only are Vulnerability …

I'm excited to announce that we’ve just released Otter 2022, and that the first prerelease of ProGet 2022 will be shipping later this week. In this article, I'll talk about: …

You’ve got a problem with your Python application. It won’t build even though it worked fine yesterday—so what gives? Well, have you checked your package dependencies lately? You know, when …

For your usual Python deployment, maybe you just clone your application using git, install the dependencies with pip, and pray it all works out: a tactic referred to as Pull-and-Pray …

Did you know that 46% of Python libraries in PyPI have vulnerability security problems? Of those, 11% can pose high-severity risks. Regularly scanning for vulnerabilities is the best way to …