Omni Line
A self-hosted package registry for npm, Composer, Docker, PyPI, Go, Cargo, Maven, RubyGems, and Multipurpose — one UI, one API, your infrastructure.
omniline.appIDENTITY AND ACCESS MANAGEMENT
Designing least-privilege registry credentials for CI
A practical procedure for scoping package registry credentials in CI: per-ecosystem token anatomy, a read/write matrix, rotation that doesn't break deploys, and the failure modes to plan for.
HIGH PERFORMANCE COMPUTING
Dependency confusion: how package resolvers choose the attacker's version
A public package with the right name can outrank your internal one. How npm, pip, and friends resolve names—and how to make resolution deterministic.
APPLEPAY PAL
DEV OPS AND SITE RELIABILITY
Supply-chain controls matter more when agents install your dependencies
Why registry-side OSV scanning and install protection matter in the agentic era—and how blocking MAL advisories and high-severity CVEs reduces supply-chain blast radius.
