A Maryland-headquartered provider of tools to automate software supply chains has acquired a Canadian firm and launched a new data service.
Fulton-based Sonatype Inc. has acquired Vor Security of Ottawa, Ontario. Ken Duck, the founder and CEO of Vor, will work on data that underpins Sonatype’s tools.
Sonatype also on Thursday introduced Nexus Lifecycle XC, a data service delivered by the the company’s Nexus IQ server that provides information about software components in many open source ecosystems and formats including Ruby, PHP, Swift, CocoaPods, Golang, C, and C++.
Through the service, the company will provide information that combines data for machine automated open source controls with data for foundational open source governance.