Sonatype Nexus Repository
Artifact repository in Developer tools
Self-hosted artifact repository that security-minded teams use to serve vetted internal package sources instead of public registries. Administration is the most common complaint.
Self-hosted artifact repository that security-minded teams use to serve vetted internal package sources instead of public registries. Administration is the most common complaint.
8 people gave an opinion
- recommend it
- 5
- criticize it
- 3
- approval share
- 63%
Recommended in 4 of 13 months
- November 2025: not recommended
- December 2025: not recommended
- January 2026: not recommended
- February 2026: recommended
- March 2026: recommended
- April 2026: not recommended
- May 2026: recommended
- June 2026: not recommended
- July 2026: not recommended
- August 2026: recommended
- September 2026: not recommended
- October 2026: not recommended
- November 2026: not recommended (month in progress)
Why it doesn’t carry the badge
- 5 people recommend itNeeds 10 or more, not met.
- 1.6 recommenders for every criticNeeds 2 to 1 or better, not met.
- Recommended in 4 of 13 monthsNeeds 4 or more, met.
The same three rules apply to every product, and the badge can’t be bought. How the badge works
What people say about it
The reasons people give, with the number of comments that give each one. Open a reason to read what they said.
Why people recommend it
Each mark is one comment
Vetted internal repositories for security teams
“Security minded organisations don't allow cowboy installs into projects, the systems are configured to use internal repos”
Comment from 12 May 2026 in “Show HN: Safe-install – safer NPM installs with trusted build dependencies” “If you want that you can always use vetted package repositories like Nexus.”
Comment from 20 Aug 2026 in “Malicious Rust Crate Arrayref Runs a Build-Time Payload” Vendor fixes reported tickets next release
“I don't like nexus that much but they accept every ticket I've opened and fix it the next release”
Comment from 26 Mar 2026 in “Apple randomly closes bug reports unless you "verify" the bug remains unfixed”
What people warn about
Each mark is one comment
Limited cleanup features, leaves detritus
“Nexus' are a joke and very limited features for both cleanup and the task set leaving ever growing detritus”
Comment from 6 Feb 2026 on Hacker News Administration is annoying
“administering Nexus is annoying”
Comment from 18 Jun 2026 in “The Forge We Deserve” Hardcodes AWS regions
“Sonatype Nexus and some other software hardcodes AWS regions to choose from”
Comment from 17 Jun 2026 in “Running local models is good now”
What people recommend instead
The same counts for each, so you can compare like for like. The tick on each bar marks the 2 to 1 line the badge needs.
| Product | Recommend | Criticize | Approval | Months | Owned | Badge |
|---|---|---|---|---|---|---|
| JFrog Artifactory | 16 | 30 | 35% | 8 | — | — |
| Sonatype Nexus RepositoryThis page | 5 | 3 | 63% | 4 | — | — |
What people said
6 of the 9 comments that mention it, newest first. Each links to the original comment.
“If you want that you can always use vetted package repositories like Nexus.”
“administering Nexus is annoying”
“Sonatype Nexus and some other software hardcodes AWS regions to choose from”
“Security minded organisations don't allow cowboy installs into projects, the systems are configured to use internal repos”
“I don't like nexus that much but they accept every ticket I've opened and fix it the next release”
“Nexus' are a joke and very limited features for both cleanup and the task set leaving ever growing detritus”
Counts come from 1,795,640 Hacker News comments, November 2025 to November 2026. How we count. Report a mistake.