Definition
A component registry (or software component registry) provides an overview of all libraries, frameworks and third-party dependencies used across an application portfolio. The registry shows versions, licences, known vulnerabilities (CVE) and ownership. ComponentA replaceable part inside a fixed asset. It has its own age, its own history and its own service life - independent of the asset it sits in. registries such as Nexus, Artifactory and GitHubMicrosoft's platform for version control and collaborative software development using Git. Packages are used in DevSecOpsDevelopment practice where security is integrated throughout the CI/CD process from the start rather than added at the end. pipelines for automated scanning. In regulated industries (NIS2EU directive on network and information security - imposes strict security requirements on critical infrastructure.), this is a requirement for supply chain security.