ArtiFACTS is your monthly roundup of new Cloudsmith product releases, industry news, and helpful resources.

NEW

Architect a scalable repository structure with connected repositories

Most teams outgrow their repository structure before they realise it. Connected Repositories are built for what comes next – model how artifacts flow across your org without duplicating packages or losing governance at any stage. You define the structure once.

Currently in Early Access for Maven, Docker, Python, and npm. Contact us to enable it for your workspace.

PRODUCT UPDATES 

What's new in Cloudsmith?

📣 Private Broadcasts are now generally available

Private Broadcasts gives teams a secure, branded distribution portal for delivering software to partners, customers, and internal users - with full customization, built-in analytics, and entitlement-controlled access to ensure your software reaches exactly the right people.

🎡 London is now a supported storage region

London joins Cloudsmith's supported storage regions, giving UK and EU teams a data residency option closer to home. For organizations with GDPR obligations or data sovereignty requirements, localized storage is a single-click choice at repository creation.

❌ Recover deleted packages within a 7-day restoration window

Deleted packages now land in recently deleted, giving you a 7-day window to recover anything removed by mistake - no support ticket required. With that safety net in place, multi-select now supports bulk deleting up to 100 packages at once.

✨ Upstream improvements: monitoring, logs, and faster Python builds

Several updates make upstream configuration and dependency resolution more reliable. A refreshed interface makes it easier to set up and monitor upstreams and dedicated upstream logs help catch resolution failures early.

✏️ Personalized tables: see what matters, hide what doesn’t
Personalized tables let you choose which columns appear, reorder them to match your workflow, and switch to compact mode to fit more data on screen. Your preferences are saved per table – so Cloudsmith always looks the way you left it.

⭕ CircleCI Orb v2.0.0: OIDC, zipapp, and full CLI access
The Cloudsmith CircleCI Orb is now at v2.0.0, adding OIDC authentication, zipapp packaging, and full CLI access. No more static API credentials in your pipelines.

INDUSTRY ROUND UP 

Resources we think you'll love

🚀 News | Cloudsmith raises $72M in Series C We raised $72M led by TCV and Insight Partners to build the operating system for the modern software supply chain. Read the announcement →

⚠️ Blog | 700+ packages compromised in hours: supply chain attacks are accelerating Two attacks, one month: Stardrop via npm, Mini Shai-Hulud via Packagist. Learn how to protect yourself with cloudsmith. Stardrop → · Mini Shai-Hulud →

🎥 Webinar | How platform engineering unlocks CRA readiness | May 21, 2026 Join Cloudsmith’s Nigel Douglas (Head of DevRel) and James Matchett (Head of Security) on May 21st to learn how to embed SBOM generation and CVE scanning into CI/CD before the September 11, 2026 deadline hits. Reserve your spot →