CodeScoring has launched CodeScoring.Save, an artifact repository designed for secure software development. The product is built from scratch using Go and is optimized for Kubernetes environments, offering an alternative to legacy monolithic solutions.
The platform addresses risks in software supply chains, including malicious packages and vulnerabilities. In 2025, CodeScoring identified 457,000 malicious packages and 14,000 new vulnerabilities in open-source components. Additionally, research indicates that 4.6% to 6.1% of packages suggested by AI models do not exist.
CodeScoring.Save supports major ecosystems such as Maven, npm, PyPI, NuGet, Go, Docker/OCI, and various Linux package formats. It features a modular architecture with a decoupled data layer, allowing metadata storage in PostgreSQL or SQLite and binary storage in S3-compatible systems.
The solution provides high availability, horizontal scaling, and audit capabilities. It is delivered as a Helm chart and includes tools for migration from open-source repositories. The product is intended for deployment within a customer's own infrastructure.
