Crista Perlton on September 24th, 2026.
ProGet’s package promotion feature provides a controlled way to move packages between feeds as they are reviewed and approved for us. By promoting packages teams can maintain a clear record of when packages were approved and made available for teams to use. In this video, we demonstrate how package promotion works in ProGet by...
Crista Perlton on September 17th, 2026.
As software projects grow, it’s easy for the number of dependencies to grow with them. Each new package helps you build faster, but it also introduces security considerations, licensing requirements, and ongoing maintenance. Without a structured approach to managing these dependencies, teams can end up with broken builds, security...
Crista Perlton on July 30th, 2026.
As software supply chains grow, keeping track of security vulnerabilities, licensing issues, and deprecated packages can become increasingly more complicated. Setting clear package compliance requirements helps organizations manage these risks by defining which packages are approved for use and the conditions they need to meet. In this...
The Inedo Team on April 23rd, 2026.
Modern applications rely heavily on open-source dependencies, which make up most codebases. Organizations rely on tools like repository scanning or automated dependency updating, treating vulnerabilities based on theoretical worst-case severity rather than real-world risk. This can introduce behavior changes that lead to regressions, or...
Crista Perlton on December 24th, 2025.
If you work with CI/CD pipelines, artifact repositories, or DevOps workflows, you’ll be familiar with Amazon S3. It’s flexible and widely used, but as your repository grows, costs can add up fast. Storage is just one piece of it; request charges and egress fees can catch teams off guard, especially when traffic spikes. As you...
Crista Perlton on November 6th, 2025.
Cloud storage has become a go-to option for storing data. It’s generally reliable and designed to scale easily as needs grow. Having said that, it does come with its challenges. User interfaces often change as providers update their platforms, permission models tend to be complex, and managing cloud storage often demands a...
Crista Perlton on April 15th, 2025.
A single-server ProGet instance, especially in organizations with sustained, high-volume traffic can become overloaded —particularly when many users are all making concurrent calls to it. Client tools like NuGet and npm can make thousands of simultaneous requests—each one needing validation, compliance checks and often forwarding through...
Crista Perlton on January 30th, 2025.
In January 2025, Fluent Assertions updated its license and terms alongside the release of version 8.0, now charging a premium for commercial use. Even so, it’s still readily available on NuGet.org, which will lead to problems if developers upgrade and continue to use it within their corporate environments. These...
The Inedo Team on July 11th, 2024.
ProGet 2024 introduces several noteworthy enhancements, especially for Basic or Enterprise users. One of the main areas of change is Software Composition Analysis (SCA). Basic users now get a more automated SCA experience, while Enterprise users unlock unlimited scanning and deeper customization. For organizations getting more...
The Inedo Team on August 10th, 2022.
We’ve made a lot of improvements to Vulnerability Scanning in ProGet 2022. Not only is it simpler to configure, but it’s integrated with the new Software Composition Analysis (SCA) features. This will let you see which of your application releases (in production or in flight) are impacted by vulnerabilities...