Artifacts Management Tools
17 package repository managers and artifact stores for secure software supply chain management
-
01
JFrog Artifactory
The single source of truth for all packages, container images, and Helm charts — JFrog Artifactory is the world's most widely adopted universal binary repository manager, supporting 30+ package formats with deep DevOps pipeline integration and security scanning.
Visit → -
02
Helix Artifacts (Perforce)
Gives you full control over who can access, edit, deploy, or use the artifacts your teams create and consume — Helix Artifacts from Perforce provides fine-grained access control, audit trails, and policy enforcement across your artifact lifecycle.
Visit → -
03
Dist
The simplest and most reliable way to securely distribute Docker container images and Maven artifacts across your team, systems, and customers — Dist focuses on ease of use and security without the operational overhead of self-hosted registries.
Visit → -
04
MyGet
A universal package manager that integrates with your existing source code ecosystem and enables end-to-end package management — MyGet supports NuGet, npm, Bower, Maven, and Vsix feeds with upstream source proxying and fine-grained access policies.
Visit → -
05
CloudRepo
The simplest option for managing, sharing, and distributing your private Maven and Python repositories — CloudRepo provides hosted private artifact repositories with team access controls, webhooks, and seamless CI/CD tool integration.
Visit → -
06
Yarn
Yarn caches every package it downloads so it never needs to download it again, and parallelizes operations to maximize resource utilization — making install times faster than npm. Yarn supports workspaces, Plug'n'Play installs, and zero-install workflows.
Visit → -
07
PyPI (Python Package Index)
The Python Package Index (PyPI) is the official repository of software for the Python programming language — hosting over 500,000 packages installable with pip, from data science and web frameworks to CLI tools and automation libraries.
Visit → -
08
Bower
Bower can manage components that contain HTML, CSS, JavaScript, fonts, or even image files — a package manager for the web that keeps track of front-end dependencies and makes it easy to install and update them in web projects.
Visit → -
09
Quay (Red Hat)
Quay builds, analyzes, and distributes your container images — a container registry from Red Hat with automated security scanning (Clair), geo-replication, robot accounts for automation, and support for both hosted and on-premises deployment.
Visit → -
10
Sonatype Nexus Repository Pro
Manage binaries and build artifacts across your software supply chain — Nexus Repository Pro supports Maven, npm, Docker, PyPI, NuGet, Conan, Helm, and more with advanced staging, promotion workflows, and integrated component intelligence for vulnerability scanning.
Visit → -
11
Apache Archiva
The Build Artifact Repository Manager — Apache Archiva is an open-source repository management platform for Maven and MRM-compatible artifacts, supporting proxying remote repositories, artifact versioning, and web-based artifact search and browsing.
Visit → -
12
AWS CodeArtifact
Secure, scalable, and cost-effective artifact management for software development — AWS CodeArtifact integrates natively with CodeBuild, CodePipeline, and IAM, supporting npm, PyPI, Maven, NuGet, and generic packages with pay-per-use pricing.
Visit → -
13
Cloudsmith
The only cloud-native, universal package management solution — allowing your organization to create, store, and share packages in any format, to any place, with total confidence. Cloudsmith supports 30+ package formats with zero infrastructure to manage.
Visit → -
14
Pulp
A platform for managing repositories of software packages and making them available to a large number of consumers — Pulp supports RPM, Debian, Docker, PyPI, Ansible, Maven, Ruby Gems, and more, with on-premises deployment and plugin architecture.
Visit → -
15
NuGet
The package manager for .NET — NuGet client tools provide the ability to produce and consume packages, powering the official NuGet.org gallery with hundreds of thousands of .NET libraries and frameworks installable via Visual Studio, dotnet CLI, and MSBuild.
Visit → -
16
NPM (Node Package Manager)
The world's largest software registry — NPM hosts over 2 million JavaScript packages and is the default package manager for Node.js. It provides public and private package hosting, scoped packages, team access controls, and a CLI for dependency management.
Visit → -
17
Docker Hub
The world's easiest way to create, manage, and deliver your teams' container applications — Docker Hub hosts millions of public and private container images with automated builds, webhooks, team management, and Official Images for popular software stacks.
Visit →