WHITE PAPERS SPONSORED PROFILES JOB BOARD WEBINAR CENTER FREE SOFTWARE BZ RESEARCH ALMSHAREPOINT EVENTS CALENDAR PRINT/PDF EDITION PRINT/PDF BACK ISSUES

SUBSCRIBE TODAY CUSTOMER SERVICE EDITORIAL BEATS GUEST VIEW GUIDE SD TIMES 100 GUIDE EVENTS CALENDAR ADVERTISING ARTICLE REPRINTS REPORT A BUG SITE MAP

ABOUT US BZ MEDIA NEWS BZ RESEARCH NEWS ON MONDAY SPTECHREPORT SPTECHWEB SPTECHCON IPHONE/IPAD DEVCON ANDROID DEVCON PRIVACY POLICY CONTACT US

HOME >> LATEST NEWS

Sonatype offers insight into enterprise open-source usage

By Victoria Reitano

September 19, 2011 — Gartner estimates that 99% of companies will be using open-source software components in their software packages by 2015, and it is because of this that Mark Driver, research vice president for Gartner, believes enterprise organizations need to understand what risks exist and how to mitigate them.

Open-source software is not free, is governed by a variety of different licenses, and comes in packages that can contain several different components, which can all have different licenses. Enterprise companies are sometimes unable to parse through the information associated with open-source software packages because of how many layers are included in each package, according to Driver.

The Linux Foundation, along with several other organizations and software companies, is working on a machine-readable license packaging standard called SPDX, which will help determine what licenses and software components are associated with each package. Originally reported in May, this standard is being supported by a variety of code-scanning companies, like Black Duck and Protecode, which provide programs that allow vendors to scan their software during the production phase to ensure that whatever is deployed to end users is licensed appropriately.

Sonatype joined these companies today with the release of Sonatype Insight, a software suite that includes Management Insight, Application Insight and Development Insight.
These tools provide an analysis of what types of open-source software enterprises are using in their software packages, and they also show where the software came from and what licensing should be used. These solutions also provide a view into what, if any, software already installed on enterprise servers can potentially clash with the new open-source software, thereby limiting the risk of a system failure or other potential business loss.

Larry Roshfeld, executive vice president at Sonatype, said developers often bring open-source software into the company’s products and in-house tools without telling C-level executives. Insight can provide a licensing overview to those C-level executives.

“Sonatype’s tool monitors the white list through the process before the build,” Roshfeld said, referring to a list of open-source packages or components that are approved. It then provides a way to monitor the packages as development teams continue through the development cycle.

The interactive portal can be customized for different levels of the development organization and different members of the development team.

Related Search Term(s): open source, Sonatype

Share this link: http://sdt.bz/35921

Most Read Latest News Blog Resources

Virtualization: Not just for machines anymore
Network virtualization allows multi-tiered applications to behave as though they were in a physical network

Zeichick’s Take: The handheld and the tablet, circa 1976
Texas Instruments' and Hewlett-Packard's calculators were doing things decades ago we take for granted today

Google talks tools at AnDevCon III
New 3D debugging tool and recent ADK changes are detailed by Google developers at the third Android Developer Conference

Android is the focus of two new design tools
Anywhere Software and Xamarin provide ways for developers to create and test their applications on PCs

Virtualization: Not just for machines anymore
Network virtualization allows multi-tiered applications to behave as though they were in a physical network

Achievements and learning: Gamification comes to businesses and schools
Startup takes page from gamers by offering achievement marks to get developers more engaged in their projects

Google talks tools at AnDevCon III
New 3D debugging tool and recent ADK changes are detailed by Google developers at the third Android Developer Conference

SmartBear rolls out new quality solution: API Complete
Software gives organizations ability to write test scripts and monitor APIs by bridging the DevOps divide

Creation
To write better software, cultivate your ability to be creative.

Slick...but who needs it?
compilr.com is a well-designed site and the folks behind it seem to have their heart in the right place. But...who needs it?

How to be a better software developer
Want to be a better developer? You won't get there by mastering an interesting language or learning a new set of APIs.

Wooing Galatea
Do yourself a favor and check out Galatea 2.2, a wonderful book by novelist Richard Powers.

Five SCM Best Practices Two-thirds of all software projects fail, according to the Standish Group’s CHAOS study. Improper usage of software configuration management...

Best Practices for Branching and Merging Patterns

Development teams often create a branching pattern, usually drawn out on a white board or in a Visio document, that is used as a model to...

Automated Error Reporting We invite you to read a short e-zine that tells you all about automated error reporting for .NET applications. This 8-page e-zine is packed...

The End of Application Redeploys Imagine that every time you wanted to write, send or receive an email, you needed to restart your computer. How much time would this take, a...

Technorati

Digg

Slashdot

Facebook

Friendfeed

Twitter

del.icio.us

In tough financial times, open source got more than a look It was a year of infrastructure, it was a year of enhanced development tools. But most of all, it was the year in which repositories grew up and mobile phones opened up.

Sonatype names former Zend exec Mark de Visser as CEO Jason van Zyl, the creator of the Maven, praised the appointment of Mark de Visser, who last worked at Zend, the company behind the PHP language. De Visser is expected to lend his expertise in growing the Maven community and improving its code quality.

Git changes how developers manage source code versions At this year's Git Together, developers praise the platform's convenience and its ability to make source control easier. Changes for the future will focus on making it more Web 2.0-compatible by offering more on-demand repositories on GitHub.

Add comment

Name*
Email*
Country

Comment

In tough financial times, open source got more than a look
It was a year of infrastructure, it was a year of enhanced development tools. But most of all, it was the year in which repositories grew up and mobile phones opened up Read More...

News on Monday
more>>
SharePoint Tech Report
more>>

Download Current Issue
MAY 2012 PDF ISSUE

Need Back Issues?
DOWNLOAD HERE

Want to subscribe?

Creation
To write better software, cultivate your ability to be creative.
05/19/2012 07:40 PM EST

Slick...but who needs it?
compilr.com is a well-designed site and the folks behind it seem to have their heart in the right place. But...who needs it?
05/16/2012 12:45 PM EST

How to be a better software developer
Want to be a better developer? You won't get there by mastering an interesting language or learning a new set of APIs.
05/14/2012 12:18 PM EST

Wooing Galatea
Do yourself a favor and check out Galatea 2.2, a wonderful book by novelist Richard Powers.
05/12/2012 07:05 PM EST

The world as story
An artificial-intelligence system at Carnegie Mellon seeks to understand the world by making statements about it.
05/10/2012 06:39 AM EST

The Rise of the Brogrammer, or the Rise of the Sexist Programmer?
Women in Silicon Valley get vocal about sexist ads and campaigns that contribute to a tense work environment.
05/09/2012 03:14 PM EST