After a focused period of design and development, the new Cloudsmith web app is now available to all customers at 

. The new web app replaces the existing cloudsmith.io, which will be fully decommissioned in 2025.

The new web app is designed to give you a clearer picture of the software flowing into and out of your business:

When you sign in, you'll be presented with crucial information about the health of your Cloudsmith workspace

The new compliance dashboard shows you vulnerabilities and policy violations across your workspace in a unified view

We now aggregate and visualise usage information; the data you store and deliver via Cloudsmith, in a much clearer way

We've made dozens of improvements, small and large, to streamline the day to day administration of your Cloudsmith workspace.

The new web app is backed by significant improvements to our 

. We'll detail these upgrades in a separate post; we've added dozens of new endpoints, making it possible to interact with Cloudsmith programmatically like never before. Automate Everything is a core value of the 

, and we're excited to see what our customers build around our enhanced API.

The new web app is not yet a like-for-like replacement for cloudsmith.io. There are a number of known gaps in the new web app, including:

Discrepancies between usage reporting across the old and new web apps; especially for customers who make heavy use of Docker containers

Signing up or in to the new web app using GitHub or other social logins is not yet available

Client logs/download logs are not visible inside the app

Software licences used across your workspace are not yet being aggregated and visualised

Users can’t upload an avatar, or set an avatar/logo for a workspace

Selecting multiple packages and carrying out bulk actions is not available yet

Various styling and user experience improvements

We are working to fill these gaps while addressing feedback submitted during early access.

If you are not quite ready to stop using Cloudsmith.io, that's no problem. Both the new and legacy web applications will work in parallel for some time to come. We'll give you and your teams plenty of time to make the switch:

w/c December 2nd 2024: General availability of app.cloudsmith.com and notification to our customers

w/c December 2nd 2024: New customers will sign up and onboard through app.cloudsmith.com

w/c December 9th 2024: New features no longer being added to cloudsmith.io. Security and critical bug fixes will continue until the legacy web app reaches end of life

w/c February 17th 2025: Customers using our public repositories will be asked to link to the new web app. Public repositories being served by the legacy app will continue to work until Cloudsmith.io is switched off in June 2025. Package download endpoints will remain unchanged

w/c May 26th 2025: Brown out of Cloudsmith.io and final preparations ahead of switch off

w/c June 23rd 2025: End of life for Cloudsmith.io. The app will become inaccessible. We will redirect requests to cloudsmith.io to app.cloudsmith.com where appropriate

You can reference this blog article in communication to your Cloudsmith users. We’ve also prepared a short 

 slide deck that summarises the transition to the new app.

We're here to help our customers through the transition to app.cloudsmith.com. 

 with your questions and feedback. We will publish frequently asked questions about the transition to the new web app here on the Cloudsmith blog.

Paul May

Senior Director, Product & Customer Experience

Launching the new Cloudsmith Web App

For organizations, distributing software artifacts effectively is crucial to building strong developer relationships and delivering a seamless experience. Yet, managing and personalizing the distribution of software packages—like SDKs or container images—can be challenging. Cloudsmith, a leader in cloud-native artifact management, has introduced 

With Broadcasts, Cloudsmith customers can manage, brand, and personalize their software delivery, ensuring a developer-native experience that aligns with the organization’s identity and meets end users where they are.

Artifact management is, at its heart, about software distribution, and it’s a natural extension of Cloudsmith’s powerful package delivery network

,” said Alan Carson, co-founder and chief strategy officer at Cloudsmith. “

With Broadcasts, customers can take full control and deliver a branded, professional experience that fosters deeper, richer relationships with their customers.

The New Standard for Artifact Distribution

Broadcasts transforms software distribution with a streamlined, brandable interface that lets organizations control which software they publicly share. Cloudsmith has incorporated branding elements, custom domains, and analytics, enabling companies to present a unified, professional experience to developers and gain insights into usage.

Key Features and Benefits of Cloudsmith Broadcasts

Broadcasts offers a cohesive, branded distribution experience through these features:

: Set up and manage Broadcasts with an easy-to-use interface, providing exact control over which artifacts are distributed, reducing setup time and enabling faster delivery.

: Organizations can use custom domains and branding elements to create a distribution page that reflects their brand, providing a recognizable and professional experience.

: Get insights from download data to understand usage trends, identify revenue opportunities, and enhance brand value.

: Broadcasts integrates with native developer tooling, allowing end users to access artifacts through their preferred CLI or CI/CD tool, creating a smooth, workflow-friendly experience.

: Powered by Cloudsmith’s extensive network, Broadcasts ensures reliable, fast distribution worldwide with over 600 points of presence, so users receive content instantly.

How Broadcasts Solves Distribution Challenges

Cloudsmith’s Broadcasts tackles key software distribution challenges by providing tools to control, brand, and analyze distribution:

: Customized distribution pages create a seamless, familiar experience for users and reinforce brand identity.

: Analytics provide actionable information on download trends and engagement, supporting marketing strategies and potential revenue growth.

: Cloudsmith’s network offers high-speed, dependable distribution, allowing organizations to focus on engagement rather than infrastructure.

In a world where developer experience matters, Cloudsmith’s Broadcasts provides a powerful, flexible solution that simplifies software distribution, enhances brand presence, and delivers actionable insights.

Experience the future of artifact distribution with Cloudsmith Broadcasts. See firsthand how you can take control of your software delivery, personalize the experience for your end users, and gain powerful insights into your distribution channels. Schedule a personalized demo with one of our experts to explore how Broadcasts can elevate your organization’s developer engagement and streamline artifact management.

 and transform your software distribution with Cloudsmith.

Elevating Software Distribution with Cloudsmith’s Broadcasts

Choosing the right software package for your project can sometimes feel like finding a needle in a haystack. Package registries do a great job at being comprehensive, but they can’t necessarily guide you to the best package for your project. What is a “high quality” package anyway? This is a problem the OSS community 

We’re proud to announce the full public release of 

. Navigator is designed to help software engineering teams select the highest quality packages early in their development lifecycle. Navigator integrates and analyses data on 

40,000 of the most popular open source packages 

across NPM, PyPi, RubyGems and Maven, assigning each one a unique quality score based on adherence to security standards, good maintenance metrics, and thorough documentation.

Like most software engineering teams, we regularly look for software packages to help us get our work done. Finding and selecting the right open source package for a project is not straightforward. It's a balancing act. You need to find something that helps you get the job done, but often a package's functionality is just the starting point.

Many packages accomplish similar objectives. Some are more secure than others. Some have better documentation than others. Some are new to the ecosystem, while others are tried and tested.

 We regularly wonder what constitutes a high quality package, and this is something that has been a source of discussion and debate for as long as open source software has existed.

?” then it backs it up with detailed information.

 It cuts through noise for engineering teams. We have developed our own unique perspective on what constitutes a great package. We have expressed this in three essential metrics:

. This is where you'll find information about the essential security and community uptake of a package. If a package has no open CVE's, good test coverage, current dependencies, and is widely used in the open source community- it’s likely to score highly on Navigator’s quality metric.

The next metric is designed to capture a package's 

. A package will score highly if it is regularly maintained by a wide pool of contributors, underpinned by a code of conduct.

The final metric in our Navigator scorecard describes a package's 

. There is nothing mysterious here, we score packages highly where they have a Readme, a documentation website, and a changelog.

 can analyse the quality of package dependencies. 

If a package looks good on the surface, you really should try to understand what packages it relies on at Runtime and Buildtime. Navigator analyses these dependencies where possible, so it's never been easier to understand the trade-offs involved in consuming an OSS package.

For the first time, we as a team have somewhere to go where we can quickly assess package quality. It's no longer a scavenger hunt. We no longer need to overinterpret the number of stars a package has on GitHub, or trawl through multiple sources of information, just to understand if a package is documented, or currently maintained.

We think this is something that all software engineering teams will use, so we’re making it available to the community. After an initial beta in late 2023, we're happy to announce that 

Over time, we’ll add many more packages, and enhance quality scores to include real-world usage data, something that is only possible with Cloudsmith. Thanks to our cloud architecture - we have a unique understanding of the way software is built today. We’re excited to incorporate some of our unique insights into future versions of 

Cloudsmith blog

Launching the new Cloudsmith Web App

Elevating Software Distribution with Cloudsmith’s Broadcasts

Cloudsmith Navigator: The Trusted Guide to OSS Package Quality