Featured
Posted by
The Inedo Team on August 12th, 2026.
Some OSS vulnerabilities require immediate action. Not tomorrow. Not after the next release cycle. Immediately. Most teams face thousands of vulnerability findings, all labeled “critical.” Among these there are those that represent the highest level of real-world risk: actively exploitable, exposed in critical systems, and capable of...
Featured
Posted by
Crista Perlton on August 7th, 2026.
Many organizations rely on Chocolatey to automate software installation and configuration across development and IT environments. Creating internal Chocolatey packages allows teams to distribute custom applications, scripts, and software configurations in a consistent and controlled manner while reducing reliance on external package...
Featured
Posted byCrista Perlton on July 16th, 2026.
AI coding assistants are helping developers write software faster than ever, but they can also introduce new supply chain risks. From hallucinated packages that don’t exist to malicious packages designed to imitate legitimate dependencies, AI-generated package recommendations can make it easier for risky components to find their...
Featured
Posted byThe Inedo Team on July 9th, 2026.
Newly published packages carry a degree of uncertainty. Regressions, breaking changes, and other defects often aren’t discovered until a version has been used by a wider audience in real-world environments. In ProGet 2026, two additional compliance rules to help you vet and monitor open-source packages in your organization. These...
Featured
Posted by
Alex Papadimoulis on June 29th, 2026.
ProGet lives in a niche… within a niche… perhaps within yet another niche. It’s not a consumer product that everyone “needs” like a smartphone. It’s a highly specialized B2B tool for organizations that care about package management, software supply chains, internal repositories, and OSS...
Featured
Posted byCrista Perlton on June 23rd, 2026.
Modern applications often rely on hundreds of open-source and third-party packages, making it difficult to track exactly what software is being used across an organization. Without visibility into package usage, teams can struggle to identify vulnerable, deprecated, or non-compliant dependencies and understand their impact on...
Featured
Posted byThe Inedo Team on June 18th, 2026.
Are your vulnerability management practices actually reducing risk, or are they quietly disrupting your ability to deliver software? That is the main question behind this year’s research. Most organizations now have some kind of process for detecting and responding to vulnerabilities in open-source...
Featured
Posted byCrista Perlton on June 11th, 2026.
Software Bills of Materials (SBOMs) have become an increasingly important part of software development. Whether you’re being asked to provide an SBOM to customers, improving supply chain visibility, or simply trying to understand exactly what dependencies your applications contain, having an accurate inventory is becoming a...
Featured
Posted byAlex Papadimoulis on June 2nd, 2026.
Inedo has exactly zero tech support reps and there’s no phone number to call for help. A lot of our users and new employees are surprised by this. How can an established, B2B software company have no dedicated support team? You mean to say that when something goes wrong, we can’t jump on a phone call together? We...
Featured
Posted byCrista Perlton on May 28th, 2026.
If you’ve used ProGet for a while, you may have heard of pgutil, but maybe never really dug into what it does or why you’d use it. Simply put, pgutil is ProGet’s cross-platform command-line tool for managing your instance without having to do everything through the web UI. It’s especially useful for automating repetitive tasks, scripting...
The Inedo Team on August 12th, 2026.
Crista Perlton
Alex Papadimoulis