We are pleased to announce we have extended our support for CRAN repositories to include R binary support. Cloudsmith now supports the ability to upload (and distribute) source packages and Windows and macOS binaries (both for 

To upload binaries, you must specify the version of R that the binary was built for, and if it's a macOS binary, the architecture it was built for too. For more information, please view 

.NET developers - we are happy to let you know that Cloudsmith now provides symbol server support for NuGet.

Now, you can create public or private repositories that contain NuGet symbols. Visual Studio uses these 

 files to let you step through code as it runs in Debug mode on your machine. Any repository in Cloudsmith can be configured as a symbol server in Visual Studio. Only symbols within that repository will be served back to the debugger.

 to get started using Cloudsmith's symbol server support.

Debug easier with NuGet symbol server support

We are pleased to add Go and Helm to our list of package formats where we extract and report license information. License information is an important part of many customers' organizational compliance requirements. For the full list of supported package formats, please 

In addition to extracting and surfacing license information, Cloudsmith also lets you create License Policies.

License Policies allow you to define which package licenses are allowed within your organization. You can specify one or more licenses to exclude and an action to perform when a specified license is detected. For more information, please review our 

As always, if you have any questions or feedback, we'd love to hear from you!

License detection for Go and Helm

Cloudsmith lets you control how your software is licensed by making it quick and easy to 

 for raw package downloads. And now, you can extend that control to any package format with 

With this new feature, you can specify that a EULA must be accepted before an 

 can be used for package download. This will allow you to enforce EULA acceptance for any package format, as entitlement tokens are used to provide controlled, read-only access to any artifact in a repository.

Learn more about Cloudsmith's support for adding EULAs to package downloads in 

Custom EULA enforcement now available for all package formats

We believe strongly that a single source for storing, securing, managing, and distributing all software within an organization is the first step to a trusted software supply chain. That's why Cloudsmith aims to support all the languages and package formats our customers use.

With that in mind, we are delighted to announce that Cloudsmith now supports public and private Hex repositories. Hex is a package manager for the BEAM ecosystem; any language that compiles to run on the BEAM VM, such as 

You can also publish using the native tooling:

Additionally, Cloudsmith scans your Hex packages for malware and CVEs and extracts license information, letting you build license and vulnerability policies to manage what packages are allowed to be used within your organization.

Cloudsmith's support for Hex repositories is in Early Access. To get started using Cloudsmith for Hex, 

Introducing support for Hex, now in Early Access

Audit logs are an essential part of a robust cybersecurity strategy. Cloudsmith offers a comprehensive view of account activity through 

, and analyzing these detailed records can be extremely useful for security incident management, compliance monitoring, and troubleshooting.

In addition to viewing audit logs in the Cloudsmith UI, audit logs are available via API and we are pleased to announce that you can now export audit logs to an AWS S3 bucket and integrate them with your observability tools. Most observability tools can consume logs from an AWS S3 bucket, either by ingesting data from custom RESTful API or through integrations.

how to use Cloudsmith logs for better observability

the documentation for setting up log exports to S3

Automate the export of audit log activity to S3

We've got some thrilling news to share! Today, we're introducing the full release of 🎉 

 🎉- a game-changer in finding and assessing open-source software (OSS) packages and launching today on 

 Cloudsmith Navigator is our latest free 🆓 tool, designed to transform your experience with OSS packages. It's all about making your life easier and your decisions smarter.

: Get the lowdown on OSS package quality like never before.

: Find exactly what you need, when you need it.

: Choose OSS packages with confidence, knowing you've got the best.

 and hear what you think! 🗣️ It'd also mean the world to us if you supported sharing and upvoting us on our 

. Your feedback drives us to keep innovating, and this is just the start to securing open-source software for us. Thank you for being an amazing part of our journey. 🛣️ Let's make OSS search and assessment a breeze together! 💨

Cloudsmith now supports R binaries

Other logs

Debug easier with NuGet symbol server support

License detection for Go and Helm

Custom EULA enforcement now available for all package formats

Introducing support for Hex, now in Early Access

Automate the export of audit log activity to S3

Launching Today: 🚀 Cloudsmith Navigator