Skip To Main Content
Brian Fox on Muck Rack

Brian Fox

New Hampshire
As seen in: Forbes, Yahoo Entertainment, Yahoo Life, Yahoo News Malaysia, Fast Company, TechRadar, Computer Weekly, InfoQ, NewsBreak, BW Businessworld and
Co-Founder & CTO, Sonatype. Former Chair, Apache Maven, BSA Scoutmaster, Amateur Radio Operator Creator of Maven-dependency-plugin and Maven-enforcer-plugin
Is this you? As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work. Claim your profile

Get in touch with Brian

Contact Brian, search articles and posts on X, monitor coverage, and track replies from one place.

Learn more about Muck Rack

Actions

Share this page

Is this you?

As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.
Claim your profile

Articles

Sonatype: Enterprise Applications Now Carry 4x More Critical Vulnerabilities as AI Accelerates Software Creation

|
By Brian Fox
| Compare the Cloud Verified
Sonatype has published research analysing four years of enterprise software development data, finding that the average application now carries 4.31 times more Critical and High-severity vulnerabilities than it did before 2022. The number of newly affected component versions is growing at 46 times the rate seen before March 2024. The counterintuitive element in the data: remediation is improving. The median age of unresolved Critical and High vulnerabilities has fallen 59% over the same period.
Open in Who Shared Issue with article?

Walking the Walk on Package Registry Sustainability

|
By Brian Fox
| sonatype.com
Resources Blog Walking the Walk on Package Registry Sustainability Walking the Walk on Package Registry Sustainability 3:42 Public package registries are not free extensions of corporate infrastructure. They sit directly in the path of modern software development. Every dependency resolution, automated build, security scan, and release depends on infrastructure that someone has to operate, secure, support, and improve.
Open in Who Shared Issue with article?

The coming burnout from managing AI agents

|
By Brian Fox
| Fast Company Verified
Technology leaders are very comfortable talking about productivity. We can discuss automation rates, developer velocity, cost curves, and defect rates with great confidence. We are less comfortable talking about mental strain, especially when the thing creating the tension is the very thing we are excited to adopt. Artificial intelligence agents will make that discomfort harder to avoid.
Open in Who Shared Issue with article?
See all 58 licensed articles (61 Total)