
Security News
Meet Socket at Black Hat Europe and BSides London 2025
Socket is heading to London! Stop by our booth or schedule a meeting to see what we've been working on.
@roadiehq/backstage-plugin-cloudsmith
Advanced tools
This plugin allows you to display statistics about a Cloudsmith repository to the homepage of Backstage.

To use this plugin, you will need to add the card to the home page in the frontend app and also set up a backend proxy for the
frontend plugin to communicate with Cloudsmith.
Cloudsmith hosts artifact repositories. Each repository is assigned an owner and a repo name when it is created. You will need
these values when you are configuring the homepage card. You will also need a Cloudsmith API Key.
Edit the packages/app/src/components/home/Homepage.tsx.
Import the cloudsmith component:
import {
CloudsmithStatsCard,
CloudsmithQuotaCard,
CloudsmithRepositoryAuditLogCard,
CloudsmithRepositorySecurityCard,
CloudsmithPackageListCard,
} from '@roadiehq/backstage-plugin-cloudsmith';
Then add the component to the homepage content component, wherever you prefer.
<Grid item xs={12} md={6}>
<CloudsmithStatsCard repo="repo-name" owner="org-name" />
</Grid>
<Grid item xs={12} md={6}>
<CloudsmithQuotaCard owner='org-name'/>
</Grid>
<Grid item xs={12} md={6}>
<CloudsmithRepositoryAuditLogCard owner='org-name' repo='repo-name'/>
</Grid>
<Grid item xs={12} md={6}>
<CloudsmithRepositorySecurityCard owner='org-name' repo='repo-name'/>
</Grid>
<Grid item xs={12}>
<CloudsmithPackageListCard owner='org-name' repo='repo-name'/>
</Grid>
Then you can edit the app-config.yaml for the backstage backend application, adding the following proxy configuration.
...
proxy:
...
'/cloudsmith':
target: 'https://api.cloudsmith.io/v1'
headers:
X-Api-Key: ${CLOUDSMITH_API_KEY}
User-Agent: 'Backstage'
When you run the backstage backend, you will need to set the CLOUDSMITH_API_KEY environment variable.
Roadie gives you a hassle-free, fully customisable SaaS Backstage. Find out more here: https://roadie.io.
FAQs
Unknown package
The npm package @roadiehq/backstage-plugin-cloudsmith receives a total of 51 weekly downloads. As such, @roadiehq/backstage-plugin-cloudsmith popularity was classified as not popular.
We found that @roadiehq/backstage-plugin-cloudsmith demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 11 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Socket is heading to London! Stop by our booth or schedule a meeting to see what we've been working on.

Security News
OWASP’s 2025 Top 10 introduces Software Supply Chain Failures as a new category, reflecting rising concern over dependency and build system risks.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.