Cloudsmith Outage History

Status: Monitoring On Friday May 1st 2026, Cloudsmith introduced PEP 658-compliant metadata to Python indexes. Packages uploaded prior to this functionality being introduced (excluding upstream packages) were unable to have this metadata fetched. Package downloads themselves remained unaffected. However, Python-native clients such as uv and newer versions of pip treat metadata fetch failures as general failures, and refused to download the affected artifacts. Upstream fetches, non-wheel artifacts, and newly uploaded wheels were unaffected. For affected packages, the result was failed Python installs. We've now removed these metadata URLs from Python indexes while we backfill the data for packages that were missing it. Affected installs should now succeed on retry. We sincerely apologize for the disruption. Affected components Package Downloads (Partial outage)

Status: Monitoring Our engineering team continues to monitor the backlog of package evaluations. Affected components Enterprise Policy Manager (Early Access) (Degraded performance)

Status: Monitoring Our team has applied targeted fixes to the policies causing the evaluation queue to build up overnight. The backlog is now clearing and processing times are recovering steadily. All other Cloudsmith services are unaffected. We're monitoring closely until everything is back to normal. Affected components Enterprise Policy Manager (Early Access) (Degraded performance)

Status: Monitoring The queue continues to clear and we are actively monitoring. We will confirm once fully resolved. Affected components Enterprise Policy Manager (Early Access) (Degraded performance)

Status: Monitoring We are aware of a security incident that Vercel reported over the weekend (Official Vercel Bulletin: https://vercel.com/kb/bulletin/vercel-april-2026-security-incident). Our Security and Engineering teams are actively reviewing the situation. At this time, we have found no evidence to suggest that our infrastructure, services or data have been impacted by this event. However, we are closely following the ongoing situation & incident response guidance provided by Vercel and the security community. We have implemented the recommended precautionary measures to ensure the continued security of our systems. We will continue to monitor our environment closely and provide further updates if our assessment changes.

Status: Monitoring Enterprise Policy Manager is an Early Access feature. Between 22 April 10:00 AM - 23 April 10:00 AM (UTC), Enterprise Policy Manager decision logs were delayed in the UI/API. For policy evaluations that occurred in this period, around 50% of decision logs have been dropped and will not be available in the UI/API. At 23 April 11:00 AM (UTC), we purged any unprocessed decision logs from the system to allow new logs to be processed. During this time, all policy evaluations completed successfully. There was no impact on the outcome of policy decisions. However, for the period stated, some decision logs are missing in the UI/API. Affected components Enterprise Policy Manager (Early Access) (Degraded performance)

Status: Monitoring We’re seeing an elevated error rate for requests hitting EU-West. API and Web UI requests are impacted. Our engineers are monitoring. Affected components Security Scanning (Degraded performance) Enterprise Policy Manager (Early Access) (Degraded performance) Package Uploads (Degraded performance) Package Sync (Degraded performance) Upstreams (Degraded performance) Package Downloads (Degraded performance) Continuous Security (Early Access) (Degraded performance)

Status: Monitoring We have deployed a fix and are actively monitoring results. Affected components Upstreams (Partial outage) Package Downloads (Partial outage)

Status: Monitoring The issues causing increased latency in the EU West region have been mitigated. Service has been restored, and we are continuing to monitor the system health Affected components Package Uploads (Operational) Cloudsmith Web App (app.cloudsmith.com) (Operational) Broadcasts (Operational) Legacy Web App (cloudsmith.io) (Operational) Package Downloads (Operational) Security Scanning (Operational) Enterprise Policy Manager (Early Access) (Operational) Blog (cloudsmith.com/blog) (Operational) Package Sync (Operational) REST API (api.cloudsmith.io) (Operational) Help & Documentation (docs.cloudsmith.com) (Operational) Upstreams (Operational) Continuous Security (Early Access) (Operational)

Status: Monitoring Mitigation steps have been taken, and service has returned to normal operational levels. We are continuing to monitor while investigating the root cause. Affected components REST API (api.cloudsmith.io) (Degraded performance) Upstreams (Degraded performance) Package Downloads (Degraded performance)

Status: Monitoring Our engineers believe they have identified the issue causing increased error rates in US East and have implemented a fix. We continue to monitor the system. Affected components REST API (api.cloudsmith.io) (Degraded performance) Upstreams (Degraded performance) Package Downloads (Degraded performance)

Status: Monitoring Our engineers have identified the issue causing increased request latency in US East 2 and have implemented a fix. We are seeing request latency returning to normal levels. We continue to monitor the system. Affected components Continuous Security (Early Access) (Degraded performance) Package Uploads (Degraded performance) Cloudsmith Web App (app.cloudsmith.com) (Degraded performance) REST API (api.cloudsmith.io) (Degraded performance) Upstreams (Degraded performance) Legacy Web App (cloudsmith.io) (Degraded performance) Security Scanning (Degraded performance) Enterprise Policy Manager (Early Access) (Degraded performance) Package Sync (Degraded performance) Broadcasts (Degraded performance) Package Downloads (Degraded performance)

Status: Monitoring We were seeing an increase in request times across all package formats. From our monitoring systems, we could see an increase in Latency at 2:09 AM UTC. This was caused by the ongoing maintenance activity. We stopped the maintenance activity at 4:10 AM UTC, and the systems recovered post that. Affected components REST API (api.cloudsmith.io) (Degraded performance) Package Downloads (Degraded performance)

Status: Monitoring Our engineers have implemented a fix for the delay in policy evaluations and continue to monitor the backlog. Customers will see a delay in policy decision logs while our system processes the backlog. Affected components Enterprise Policy Manager (Early Access) (Partial outage)

Status: Monitoring Policy evaluations have returned to normal operation. While we process the remaining backlog of decision logs, customers may notice a temporary delay in log availability. Our team is monitoring the recovery. Affected components Enterprise Policy Manager (Early Access) (Partial outage)

Status: Monitoring We have resolved the incident affecting policy evaluations and are now monitoring the remaining backlog for EPM decision logs. Core services are fully operational Affected components Enterprise Policy Manager (Early Access) (Operational)

Status: Monitoring The remaining EPM decision log backlog is continuing to process successfully and is being actively monitored. New evaluations for EPM will have their decision logs processed as normal and will not be affected by the backlog. Core services are not affected. Affected components Enterprise Policy Manager (Early Access) (Operational)

Status: Monitoring Service stability has been restored. Our team will continue monitoring the situation while investigating the root cause. Affected components Package Sync (Operational) Package Downloads (Operational) Package Uploads (Operational)

Status: Monitoring Performance continues to be stable and core functionality is operational. We are monitoring overnight and will provide updates as they become available. Affected components Package Uploads (Operational) Package Sync (Operational) Package Downloads (Operational)

Status: Monitoring Services are currently stable. We are actively investigating the root cause of intermittent performance fluctuations and limited errors observed between 1:25 AM and 7:00 AM UTC. We will provide updates as they become available. Affected components Package Uploads (Operational) Package Sync (Operational) Package Downloads (Operational)

Status: Monitoring We have identified the root cause and taken actions to mitigate. Services are operational and performance has returned to normal levels. We will continue to monitor performance and error rates throughout the day. Affected components Legacy Web App (cloudsmith.io) (Operational) Package Downloads (Operational) Package Uploads (Operational) Cloudsmith Web App (app.cloudsmith.com) (Operational) Package Sync (Operational)

Status: Monitoring System performance and package uploads have returned to normal, though we are continuing to investigate the root cause. While a small number of policy evaluations experienced intermittent failures between 08:07 and 09:51 UTC, all other core services remain stable. Enterprise Policy Manager (EPM) decision logs are currently delayed by approximately 6 hours as the backlog is processed. Affected components Package Uploads (Operational)