"Java.net is the premier source for Java technology collaboration with more than 600,000 members and 2,000 projects in development. With an industry-standard infrastructure now in place, Sonatype and Oracle have made it easier for existing and future Java.net projects to leverage the collective knowledge and work of the community to …

"We are dealing with patient data and healthcare data. Security comes above everything. The fact that we can trace vulnerabilities and their dependencies with Nexus Lifecycle alleviates this from our list of things do."

“It was not easy to find a solution that covered all of our complex legal and security requirements. After evaluating a dozen different tools, we chose Sonatype Lifecycle for its completeness of pulling copyright and licensing information, data accuracy, and quick identification of legal, security, and technical findings.”

"Nexus should be a must. Once you embrace it, you won't want to go back."

"Nexus has given us a solid repository for our artifact storage and is our ultimate source of truth for the available versions of our own internal application wars and jars. We're very happy with the LDAP integration, REST API, and I recommend it."

"Nexus helped to reduce our costs for dependency management. We saw a much lower failer rate caused by using wrong artifacts and saw much faster builds due to the proxy cache."

“Sonatype specializes in streamlining component-based development, so the quality is much higher than any other solution we evaluated and far better than manual effort.”

"Everyone who saw Nexus Lifecycle said, ‘This is something we can work with. This is the tool that works for us."

"With Lifecycle, we can help programmers make the right decisions and make their software more secure. That's why we chose Nexus Lifecycle."

"We narrowed down our trials to Sonatype Nexus and JFrog Artifactory. We decided to go with Nexus because the OSS version seemed to deliver most of what we were looking for."

"We’ve had a single Nexus instance standing up for two years. The maintenance and support effort is zero because everything just works."

“Through the use of Nexus Lifecycle, our team can proactively ensure open source security vulnerabilities are precisely identified, managed and resolved before they can impact our customers.”

"The biggest advantage of using IQ Server is to be able to report to our project team what specific libraries are used within our applications. We have immediate visibility into security issues."

"We needed constant monitoring and notifications of open source vulnerabilities in our applications. That’s what Nexus Repository, Nexus Lifecycle and IQ Server delivered."

"By layering automation and instrumentation through our pipelines we were able to reduce the average time for new applications from 25 days to 2.5 days, with the record of 8 minutes from desktop to cloud."