Vigilance vs Sonatype Nexus
Sonatype Nexus. Holds your packages and blocks the ones it knows are bad before a build can pull them.
Vigilance. Sits on the machine and compares what is there now against what was there last time.
Side by side
| Question | Sonatype Nexus | Vigilance |
|---|---|---|
| Blocks a known bad package | Yes | No |
| Stores and serves your own packages | Yes | No |
| Covers software that never went through it | No | Yes |
| Spots a new file that runs itself during an install | No | Yes |
| Spots a file that can suddenly do more than before | No | Yes |
| Watches a running machine or a device in the field | No | Yes |
Which one do you need?
Use both. Sonatype guards the front door. Vigilance watches the machine after the package is through it.
Try it on your own software.
Show it the version you run today and the one you are about to install.