Your packages. Your servers. Your freedom.
Website · Docs · Live Demo · MIT Licensed
What is Artifact Keeper?
A full-featured, enterprise-grade artifact registry you can self-host in minutes. Drop-in replacement for JFrog Artifactory and Sonatype Nexus with zero feature gates — security scanning, SSO, replication, all 45+ package formats — everything ships in the open-source release.
No open-core. No "enterprise edition." No surprise invoices.
Repositories
Repository Description Stack artifact-keeper Backend server, CLI, and Docker deployment Rust, Axum, PostgreSQL, Meilisearch artifact-keeper-web Web frontend Next.js 15, TypeScript, Tailwind CSS, shadcn/ui artifact-keeper-ios iOS & macOS app SwiftUI, Swift 6, Alamofire artifact-keeper-android Android app Jetpack Compose, Kotlin, Material 3 artifact-keeper-api OpenAPI 3.1 spec (165 endpoints) TypeScript + Rust SDK generation artifact-keeper-example-plugin Example WASM plugin (Unity .unitypackage) Rust, WIT, Wasmtime
Core Features
45+ Package Formats — Native protocol support. Not a generic blob store with format labels. Your package managers ( pip install , npm install , docker pull , cargo add , helm install , go get , etc.) talk directly to Artifact Keeper using their native protocols.
Security Scanning — Automated vulnerability detection with Trivy and Grype. Policy engine with severity thresholds, quarantine workflows, and scan-before-download enforcement.
... continue reading