user

Inedo Blog


Navigation
Featured

ProGet

Webinar: Vulnerability Management in ProGet 2026

Posted on April 23rd, 2026.

Modern applications rely heavily on open-source dependencies, which make up most codebases. Organizations rely on tools like repository scanning or automated dependency updating, treating vulnerabilities based on theoretical worst-case severity rather than real-world risk. This can introduce behavior changes that lead to regressions, or...

Featured

Python

PyPI Package Dependencies and Their Unintended Consequences

Posted on April 16th, 2026.

Having uncontrolled package dependencies can lead to some unintended consequences, like version conflict and even malicious and vulnerable packages. Let’s see what happens when you let those dependency trees go unchecked.

Featured

NuGet

4 Filtering Practices for NuGet.org

Posted on April 14th, 2026.

NuGet.org is a great source for packages to jump-start a project, but it's important to filter packages from the open-source community before downloading.

Featured

NuGet

NuGet NuSpec Fields Explained: Dos and Don’ts

Posted on March 12th, 2026.

There are many metadata fields in a NuGet Package. For first-party packages, you can avoid 8 and not have any problems in your development.

Featured

Lean Platforms

Feature Flags Don’t Reduce Risk—They Hide It

Posted on March 3rd, 2026.

Back in 2012, a feature flag at Knight Capital accidentally turned on dormant code, triggering uncontrollable trades and a $440 million loss. This kind of failure shows how risky feature flags can be when they’re misused. If teams rely on them to feel safe instead of really understanding the change, even routine deployments can go badly...

Featured

Inedo

The Inedo Snack Box Is Back

Posted on February 19th, 2026.

Last year, we sent out the Inedo Snack Box to our members, and we’ll be doing the same again in 2026! Whether you run ProGet, BuildMaster, or Otter, are exploring our products for the first time, or provided feedback during evaluation, your input has helped shape what we build. At Inedo, we describe ourselves as a user-driven company....

Featured

NuGet

NuGet License Expressions, Explained

Posted on February 12th, 2026.

There are three ways to express a license in a NuGet package: expressions, url, and file. This article is a quick explainer on what NuGet license types are.

Featured

Inedo

Changes to Malicious Package Handling in 2025.20 and Beyond

Posted on February 6th, 2026.

Over the past year or so, the number of malicious packages has grown beyond anyone’s wildest expectations. The rapid, 10,000%+ increase has caused scaling challenges in systems like ProGet, which are designed to detect and block these harmful packages. For ProGet, this translated to timeouts and slowness when processing data...

Featured

Lean Platforms

Predictable, Intentional Releases – Webinar Recap

Posted on January 15th, 2026.

Have you ever noticed how small, everyday issues start piling up while your team is focused on delivering those “big” or “transformative” changes? Hidden dependencies, and operational pressure build into bigger problems: backlogs that never shrink, urgent requests slipping through, and teams constantly putting out fires. What begins as...

Featured

ProGet

Choosing the Right S3 Alternatives for Artifact Storage

Posted on December 24th, 2025.

If you work with CI/CD pipelines, artifact repositories, or DevOps workflows, you’ll be familiar with Amazon S3. It’s flexible and widely used, but as your repository grows, costs can add up fast. Storage is just one piece of it; request charges and egress fees can catch teams off guard, especially when traffic spikes. As you...