Data Insights

Data Insights are now available to all Lifecycle customers, regardless of their status in the Product Preview Program. You may need to restart Lifecycle or reinstall your license to access Data Insights.


Data Insights is an experimental set of analyses available in Sonatype Lifecycle. Data Insights is sponsored and developed by the Sonatype Data and Analytics team, and its goal is to drive future product capabilities around data. The Experimental Feature caveats:

  • Supported by the Research Team via Sonatype Support. While the Research Team strives to provide the same great experience of Sonatype's Support team, response times may vary
  • Feature functionality may change without notice
  • Features may be removed without notice
  • Data for specific Data Insights may change without notice
  • Features are provided as-is, without warranty

To suggest improvements to these experimental features, visit


Data Insights uses billions of data points from the Sonatype Community, the open-source community, and our customers to give you a new perspective on open-source consumption patterns and technologies within your organization.

The goal of Data Insights is to kickstart a discussion about how, when, and why your organization consumes open-source components. Ideally, these analyses will help you prepare and implement good open-source governance policies.



To access Data Insights, select Data Insights from the left navigation bar.

In previous versions of Lifecycle, Data Insights are accessed through the cogwheel icon in the top right corner of the browser UI.


The following insights are currently available:

SBOM Scorecard

The SBOM Scorecard is a visual representation of the quality of component upgrade decisions made by your Java development teams. The goal of this analysis is to prompt discussions about component upgrade decisions in your organization.

To learn more, visit the SBOM Scorecard documentation.

Stack Divergence

The Stack Divergence analysis compares the popularity of components in your tech stack to the industry at large. This comparison helps you identify where you meet the de facto "standard" of the industry, and where you don't. 

To learn more, visit the Stack Divergence documentation.

Nudges and Anomalies

The metrics in Nudges and Anomalies are key indicators of your platform usage and can reveal patterns and trends in your remediation process.

To learn more, visit the Nudges and Anomalies documentation.

Rolling Recap

Rolling Recap shows graphical representations of the state of the Software Supply Chain for your organization. It unlocks trends and patterns by comparing your usage of Sonatype Lifeccle with the rest of the industry, over the past year.

To learn more, visit the Rolling Recap documentation.