Featured
Posted by
Crista Perlton on August 28th, 2026.
As organizations build more internal tools and shared libraries, distributing Python packages through public repositories or manual file sharing can quickly become difficult to manage. Hosting packages in a private repository gives teams a centralized way to securely publish, version, and share reusable code across projects and...
Featured
Posted byCrista Perlton on August 20th, 2026.
Modern software development depends on consuming open-source packages directly from public repositories, making it challenging to maintain consistency, visibility and governance. Organizations often need a way to access external packages while still enforcing security, compliance, and software supply chain policies. In this video, we...
Featured
Posted byCrista Perlton on August 7th, 2026.
Many organizations rely on Chocolatey to automate software installation and configuration across development and IT environments. Creating internal Chocolatey packages allows teams to distribute custom applications, scripts, and software configurations in a consistent and controlled manner while reducing reliance on external package...
Featured
Posted byCrista Perlton on July 30th, 2026.
As software supply chains grow, keeping track of security vulnerabilities, licensing issues, and deprecated packages can become increasingly more complicated. Setting clear package compliance requirements helps organizations manage these risks by defining which packages are approved for use and the conditions they need to meet. In this...
Featured
Posted byCrista Perlton on July 23rd, 2026.
If you’re trying to figure when you’ll need to upgrade .NET, Microsoft’s support lifecycle can be confusing. While .NET releases follow a predictable schedule, Standard Term Support (STS) and Long-Term Support (LTS) releases have very different support timelines. You’ll need to understand these to avoid unexpected...
Featured
Posted byCrista Perlton on July 16th, 2026.
AI coding assistants are helping developers write software faster than ever, but they can also introduce new supply chain risks. From hallucinated packages that don’t exist to malicious packages designed to imitate legitimate dependencies, AI-generated package recommendations can make it easier for risky components to find their...
Featured
Posted byCrista Perlton on June 23rd, 2026.
Modern applications often rely on hundreds of open-source and third-party packages, making it difficult to track exactly what software is being used across an organization. Without visibility into package usage, teams can struggle to identify vulnerable, deprecated, or non-compliant dependencies and understand their impact on...
Featured
Posted byCrista Perlton on June 11th, 2026.
Software Bills of Materials (SBOMs) have become an increasingly important part of software development. Whether you’re being asked to provide an SBOM to customers, improving supply chain visibility, or simply trying to understand exactly what dependencies your applications contain, having an accurate inventory is becoming a...
Featured
Posted byCrista Perlton on May 28th, 2026.
If you’ve used ProGet for a while, you may have heard of pgutil, but maybe never really dug into what it does or why you’d use it. Simply put, pgutil is ProGet’s cross-platform command-line tool for managing your instance without having to do everything through the web UI. It’s especially useful for automating repetitive tasks, scripting...
Featured
Posted byCrista Perlton on April 16th, 2026.
Having uncontrolled package dependencies can lead to some unintended consequences, like version conflict and even malicious and vulnerable packages. Let’s see what happens when you let those dependency trees go unchecked.
Crista Perlton on August 28th, 2026.