Sonatype
More info
- Creator
- Jason van Zyl
- Released
- 2008
- Type
- Software company
The company that runs Maven Central, and so has its hand on the tap for much of the Java world's dependencies.
Jason van Zyl, creator of Apache Maven, founded Sonatype in 2008. The company stewards Maven Central, the public registry that nearly every Java build pulls from, and sells Nexus Repository, a direct competitor to JFrog's Artifactory.
Sitting at the tap gives an unusual view. Sonatype could show, for instance, that a large share of Log4j downloads were still of vulnerable versions long after Log4Shell had made world headlines. Its annual report on the software supply chain has made the company a recurring voice in debates about SBOMs and supply chain attacks.