Your development team uses npm packages hosted on public registries. Security policies now require that all external dependencies are scanned and cached internally to prevent build failures if the public registry goes down or a package is deleted. Which feature of Azure Artifacts should you implement?

Question

Sunny · Accepted Answer

Upstream sources. Upstream sources allow you to use a single feed to store both your internal packages and external packages from public registries (like npmjs.com, NuGet.org). When a developer requests an external package, Azure Artifacts pulls it, caches it internally, and serves it. If the public package is later deleted, the cached copy remains available.

📚 What This Question Tests