Featured
Posted by
Crista Perlton on August 7th, 2026.
Many organizations rely on Chocolatey to automate software installation and configuration across development and IT environments. Creating internal Chocolatey packages allows teams to distribute custom applications, scripts, and software configurations in a consistent and controlled manner while reducing reliance on external package...
Featured
Posted byCrista Perlton on July 30th, 2026.
As software supply chains grow, keeping track of security vulnerabilities, licensing issues, and deprecated packages can become increasingly more complicated. Setting clear package compliance requirements helps organizations manage these risks by defining which packages are approved for use and the conditions they need to meet. In this...
Featured
Posted byCrista Perlton on July 23rd, 2026.
If you’re trying to figure when you’ll need to upgrade .NET, Microsoft’s support lifecycle can be confusing. While .NET releases follow a predictable schedule, Standard Term Support (STS) and Long-Term Support (LTS) releases have very different support timelines. You’ll need to understand these to avoid unexpected...
Featured
Posted byCrista Perlton on July 16th, 2026.
AI coding assistants are helping developers write software faster than ever, but they can also introduce new supply chain risks. From hallucinated packages that don’t exist to malicious packages designed to imitate legitimate dependencies, AI-generated package recommendations can make it easier for risky components to find their...
Featured
Posted byCrista Perlton on June 23rd, 2026.
Modern applications often rely on hundreds of open-source and third-party packages, making it difficult to track exactly what software is being used across an organization. Without visibility into package usage, teams can struggle to identify vulnerable, deprecated, or non-compliant dependencies and understand their impact on...
Featured
Posted byCrista Perlton on June 11th, 2026.
Software Bills of Materials (SBOMs) have become an increasingly important part of software development. Whether you’re being asked to provide an SBOM to customers, improving supply chain visibility, or simply trying to understand exactly what dependencies your applications contain, having an accurate inventory is becoming a...
Featured
Posted byCrista Perlton on May 28th, 2026.
If you’ve used ProGet for a while, you may have heard of pgutil, but maybe never really dug into what it does or why you’d use it. Simply put, pgutil is ProGet’s cross-platform command-line tool for managing your instance without having to do everything through the web UI. It’s especially useful for automating repetitive tasks, scripting...
Featured
Posted byCrista Perlton on April 16th, 2026.
Having uncontrolled package dependencies can lead to some unintended consequences, like version conflict and even malicious and vulnerable packages. Let’s see what happens when you let those dependency trees go unchecked.
Featured
Posted byCrista Perlton on December 24th, 2025.
If you work with CI/CD pipelines, artifact repositories, or DevOps workflows, you’ll be familiar with Amazon S3. It’s flexible and widely used, but as your repository grows, costs can add up fast. Storage is just one piece of it; request charges and egress fees can catch teams off guard, especially when traffic spikes. As you...
Featured
Posted byCrista Perlton on December 11th, 2025.
If you’re managing projects that rely on multiple teams delivering consistent components, you’ve probably noticed the chaos that comes from storing build artifacts and libraries in shared folders. Each team has its own way of organizing files, versions get mixed up, and no one really knows which asset the project should be using....
Crista Perlton on August 7th, 2026.