Official summary
What is being procured?
In summary, the Services comprise: (1) supply of a three Sonatype tools: Nexus Repository, Lifecycle and Firewall, for the purpose of (a) binary repository management, (b) security vulnerability checking of 3rd party open source libraries, (c) license compliance checking of those libraries, and (d) architectural governance to manage the use of such 3rd party libraries; (2) support/maintenance contract of the tool for the duration of the license. No other tools from Sonatype are required by this proposal. In particular, Sonatype SBOM Manager is not required.
Notice history
Procurement timeline
Follow the main stages and updates linked to this procurement procedure.
Data is restructured for easier reading. The official notice and procurement documents always prevail.
Source and reliability
TED · 610294-2026. Checked on Sep 7, 2026, 8:06 AM.
Data is restructured for easier reading. The official notice and procurement documents always prevail.