Watch this space for news of changes and how you can best take advantage of new features in the Tidelift subscription!
August 2023
- Added the ability to download CycloneDX bills of materials in JSON format
- Added the ability to set an external identifier for projects that can be used to associate with other systems or tracking
- Added the ability to import SPDX-formatted bills of materials
July 2023
- We have added new APIs that allow assigning manually researched licenses to packages and releases
- Updated CLI to fix an authentication issue with some project keys
June 2023
- We have added new APIs that allow listing, creating, and deleting overrides to standard violations
- We have added new APIs for configuring the "Releases have approved licenses" standard
- Updated REST APIs to only require passing organization name, not organization type
May 2023
- We released a new design of the application to make it easier to find what you're looking for and understand how the data fits together.
- Projects can be renamed via the project update API
- Native support for Apple Silicon (M1/M2) Macs is now available in the Tidelift CLI
April 2023
- We have released a redesign of the API key pages to make it easier to find and manage the API keys associated with your organization
- We have released a refresh of the quality checks on individual package pages to better highlight relevant checks to your organization by grouping related checks into categories, giving streamlined statuses, and some curation of the checks shown.
- The alignment APIs and CLI now expose information about dependency scopes so that you can use that as information in your CI integration. Read more with examples of how to use this.
- We have an updated status site that allows you to subscribe to receive email notifications when the Tidelift site is having issues.
March 2023
- The bill of materials API now supports getting a bill of materials in additional formats including SPDX and CycloneDX similar to what can be fetched from the web UI.
- A new report is available to help understand how vulnerabilities are brought into your projects via the Prioritized action report
- Information on Java libraries from the Google Android Maven repository are now available within Tidelift
Comments
Article is closed for comments.