Minimus today announced the general availability of two new capabilities that help organizations secure software dependencies and manage custom container images as code: Minimus Supply Chain Protection and minicli.

Minimus Supply Chain Protection addresses the challenge of securely using the tens of millions of packages from the application package universe. These packages have thousands of interwoven dependencies, are often maintained by a single developer, and are updated far less frequently than operating system packages.

Minimus Supply Chain Protection acts as a policy enforcement layer that sits between developers and public package repositories, allowing organizations to evaluate, control, and audit application dependencies before they are consumed by developers or CI/CD pipelines.

Implemented as a pull-through proxy for NPM and PyPI, Supply Chain Protection operates with no impact on the developer experience, while giving security and platform teams visibility into package usage and the ability to enforce package trust policies across environments.

Minimus minicli allows customers to extend both the visibility of custom images to their own local terminals and manage the full recipe for those images as code. With minicli, customers can view and manage existing private images, inspect custom image structures, export and version-control image configurations as YAML files, and trigger and monitor new image builds.