Brian Fox
Co-founder & CTO at Forbes Technology Council
New Hampshire, United States
Summary
👤
Senior🎓
Top SchoolBrian Fox is a proven technology leader and co-founder/CTO of Sonatype with over 20 years building developer tools and supply-chain security for organizations from startups to global enterprises. Deeply embedded in the Apache Maven ecosystem, he authored and maintained cornerstone plugins like maven-dependency-plugin and maven-enforcer-plugin and helps steward Maven Central, the world’s largest Java component repository that now exceeds a trillion downloads annually. He blends hands-on backend Java development—evident in extensive Apache contributions and work improving OWASP dependency-check analyzers—with product and engineering leadership across Sonatype since 2007. An active open-source and policy contributor, Brian serves on the OpenSSF and FINOS governing boards and has helped shape national OSS cybersecurity responses and consumption best practices. He communicates complex supply-chain security ideas to technical and policy audiences, including publishable thought leadership that applies manufacturing lessons to software supply chains. Based in New Hampshire, he pairs practical engineering chops with a rare combination of community stewardship and public-sector influence.
20 years of coding experience
21 years of employment as a software developer
Presenting Data and Information, Presenting Data and Information at Edward Tufte CoursesCertified Scrummaster, Certified Scrummaster at BigvisibleBS CS, BS CS at Daniel Webster College
Github Skills (25)
dependency-management10
debug10
package-management10
dependency-analysis10
plugin-development10
maven-plugin10
audit10
software-composition-analysis10
java10
javas10
read-me10
maven10
version-control10
build-management10
auditing10
Programming languages (11)
Github contributions (5)
apache/maven-dependency-plugin
Apr 2006 - Mar 2013
Apache Maven Dependency Plugin
Role in this project:
Backend Developer
Backend DeveloperContributions:221 commits in 7 years
Contributions summary:Brian applied several patches to the Apache Maven Dependency Plugin, primarily addressing issues and adding functionality. The contributions focused on improving the logging of dependency status, enhancing the filtering of dependencies by scope, and adding options to output artifact filenames. The user's work improved the plugin's usability and diagnostic capabilities.
maven-pluginmaven-pluginsmavenmaven-dependency-pluginapache
apache/maven-enforcer
Sep 2007 - Nov 2010
Apache Maven Enforcer (Plugin)
Role in this project:Back-end Developer
Back-end DeveloperContributions:119 commits in 3 years 2 months
Contributions summary:Brian primarily worked on refactoring and restructuring the `apache/maven-enforcer` project, as indicated by the commit messages "Moved remotely" and "more refactor." These changes involved moving and modifying source code, updating API interfaces, and adjusting dependencies within the Maven build system. Furthermore, the user added functionality to enforce plugin versions by implementing rules that validate and enforce proper versioning of plugins.
maven-pluginsenforcermavenenforcer-pluginapache
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.