Security scanning provides an opportunity to target, track, and trace vulnerabilities introduced to your packages as soon as Cloudsmith has received a complete package upload. However what happens when you want to intercept the results of a scan immediately. An early warning can make a difference when distributing vulnerable packages to hundreds, thousands, or even millions of developers, devices, or systems globally.

One of the key metrics IT leaders care about is the total time it takes for a release to go from development to being live in production. The metric used to measure that duration is called the “release lead time.” It can range from days to months, depending on factors such as team agility, enterprise constraints, and interdependencies.