HTTP Response Codes

The Lineaje GOS Artifactory Proxy returns standard HTTP status codes. The following table describes each code, its meaning, and the recommended action for your build pipeline.

HTTP Status	Meaning	Package Managers	Action Required
200 OK	Package is Gold Open Source and all policies passed. Artifact is streamed to the build tool.	Maven, PyPI, npm	No action required. Build proceeds normally.
401 Unauthorized	Request is missing credentials or the credentials are invalid.	Maven, PyPI, npm	Verify ARTIFACTORY_CREDS is correctly configured and the credential ID matches exactly.
403 Forbidden	Package is not Gold Open Source or a custom policy has blocked the download. (Enforce mode only.)	Maven	Review the 'Policies violated' message in build logs. Upgrade to a Gold-qualified version or request a policy exemption via the Lineaje platform.
404 Not Found	Package is not Gold Open Source or a custom policy has blocked the download. (Enforce mode only.) Also returned when the package/version genuinely does not exist.	PyPI, npm	Same as 403 above. Distinguish from a genuine 404 by checking for 'Policies violated' in the response body. (PyPi and npm package managers only recognise 404 for violations)
500 Internal Server Error	Package has not yet been analysed by Lineaje. It has been submitted for analysis. Retry after a short delay; the package will be evaluated and the results will be available.	Maven, PyPI, npm	Re-trigger the build after 5–10 minutes. If the error persists, contact Lineaje support.

In Observe mode, the Firewall always returns 200 for valid packages, regardless of GOS status. Policy violation details are still logged to the Lineaje platform.