Nexus Repository is Sonatype's repository manager, and the model it uses is small enough to hold in your head. Every format behaves the same way: a hosted repository for what you publish, a proxy repository that caches an upstream, and a group repository that presents several of them behind one URL a build can point at. Change one line in settings.xml, .npmrc, pip.conf or a Docker daemon configuration and every dependency now arrives through a server you operate, log and can take offline.
Underneath that uniform surface, Nexus separates components from storage. A component is the logical thing — a Maven artifact, an npm package, a Docker image — and it is made of assets, while the bytes themselves live in a blob store that can be a filesystem path or an object store such as S3. That separation is what makes the operational behaviour make sense: deleting a component marks its blobs for deletion but does not reclaim space until a compact task runs, which is why storage keeps growing for teams who delete things and never schedule maintenance.
The rest of the system is a set of levers most installations never touch. Cleanup policies and scheduled tasks bound growth by age, download date or version count. Routing rules stop a proxy from asking upstream for internal packages that will never be there. Content selectors express fine-grained privileges over paths and formats, so a team can be granted exactly one namespace. Security is a stack of pluggable realms — local, LDAP, SAML, Docker bearer token, npm token, NuGet API key and user tokens — mapped through privileges into roles. And a repository health check reports what is coming in from upstream, which is where component governance usually begins.
Why this skill matters now
Build reliability became a measurable cost. Every failed build caused by a public registry outage, a rate limit or a slow international link is paid for in engineer time, and the fix has been well understood for years — put a caching repository manager in front of everything — yet a large number of teams still resolve dependencies directly from the internet on every build. Once they stop, the repository manager becomes a piece of infrastructure whose availability, performance and storage are somebody's responsibility.
That responsibility has grown. Software supply chain expectations mean an organisation is now asked what components entered its builds, from where, under which licences, and whether a specific artifact in production came from a pipeline or from someone's laptop. A repository manager answers all of those, but only if repositories are laid out deliberately, publishing is restricted, and anonymous deployment was never enabled.
Storage is the third pressure and the most predictable. Blob stores grow, Docker repositories grow faster, snapshot builds accumulate, and nothing is reclaimed without scheduled tasks and cleanup policies. The engineers in demand are the ones who can lay out repositories that survive reorganisation, keep the proxy layer resilient when the internet is not, model access with content selectors instead of shared accounts, and keep the storage line flat — and who can compare Nexus with the alternatives honestly when a migration is proposed rather than assumed.