Documentation Nexus IQ Server 1.17

Our documentation site has moved. For the most current version, please see http://help.sonatype.com

12.3. Accessing CLM Component Information

As a native capability, Nexus provides robust search capability for returning components that exist in your repositories. When components are returned in your search results (see below), an option to see all versions is displayed.

figs/web/nexus-clm-search-results.png

Figure 12.3. Typical Search Results in Nexus Pro


[Tip]

To get results that are not in the local Nexus cache, you will want to make sure the Download Remote Index option is enabled for the proxy repository. For guidance on this, checkout section 6.2.4 (specifically Fig 6.9): Configuring Repositories in the Nexus Book.

Clicking this link will display additional information in the search panel, as well as expand information available for each selected component. Depending on your Nexus license you will have one of the two options below.

RHC
Configuring an applicable repository to use RHC (Repository Health Check) will enable the repository to be analyzed by Sonatype directly, and will display (when available) security, license, age and popularity data. Details are provided in the Component Info tab located below the search panel.
Sonatype CLM
Configuring Nexus to connect to Sonatype CLM will provide the same information available for RHC, but will also provide additional general and policy violation information for each component.
figs/web/nexus-clm-show-all-versions.png

Figure 12.4. Nexus Search Showing All Versions


[Note]

Nexus search is only available for open source Java components.

For now, we’ll focus on the additional information available through Sonatype CLM. To access this, you need to click on the Component Info tab. It is located just below the displayed search results, to the right of the directory tree for the selected component.

figs/web/nexus-clm-access-comp-info.png

Figure 12.5. Accessing the Component Info Tab


[Note]

Only users that are logged in will be able to see the Component Info tab.

Clicking on the Component Info tab will display a drop down list of applications associated with your Sonatype CLM Server. Once you have selected an application, the Component Information Panel (CIP), similar to what is provided via the Application Composition Report and CLM for Eclipse, will be displayed.

figs/web/nexus-clm-comp-info-cip.png

Figure 12.6. Component Information Panel


[Note]

Information on the Component Info tab requires a Sonatype CLM License. Nexus Pro Users will simply be provided with additional details regarding the security vulnerabilities and license issues. Those using Nexus Open Source will not have access to the Component Info tab.