Apache Trusted Releases

No phone app

6.1No. 24 of 32
in Release Management Software
  • Recognised40% of the score63
  • Phone app26% of the score0
  • Documented20% of the score31
  • Free plan14% of the score30
Free plan
No
Runs on
api, self-hosted, Web

Summary

Apache Trusted Releases is ranked #24 of 32 in release management software on Samsung Mobile US Press. It runs on API, Self-hosted, Web.

Compared on release management software

Release workflows
Yesreleases.apache.org
Approval gates
Yesreleases.apache.org

Facts

Purpose
Apache Trusted Releases is a platform intended to verify and distribute Apache releases securely.releases.apache.org · 5 Oct 2026
Intended users
Its users include Apache project participants who publish software and end users who obtain it.releases.apache.org · 5 Oct 2026
Release workflow
The documented workflow is to compose a candidate release, hold a PMC vote, and publish and announce the release if the vote passes.releases.apache.org · 5 Oct 2026
Interfaces
The platform offers a web interface, JSON API, command-line interface, GitHub Actions, and a Maven plugin.releases.apache.org · 5 Oct 2026
Artifact checks
Automated checks cover signatures, hashes, archive layout, licensing, and SBOM content before a vote.releases.apache.org · 5 Oct 2026
Release catalog
ATR maintains a catalog of current and archived release artifacts for end users.releases.apache.org · 5 Oct 2026
SBOM analysis
For CycloneDX SBOM files, ATR evaluates NTIA 2021 conformance, validation results, license signals, and vulnerability data.releases.apache.org · 5 Oct 2026
Additional SBOM tools
ATR can generate a CycloneDX SBOM from an archive, score or augment an SBOM, and run an OSV vulnerability scan.releases.apache.org · 5 Oct 2026
Access
The live platform asks users to log in with an ASF account, and the Tooling site says users get access to their PMC's projects.releases.apache.org · 5 Oct 2026
Beta availability
The ASF Tooling site says ASF PMCs and incubating podlings may participate in beta testing.tooling.apache.org · 5 Oct 2026
Development status
The source repository describes the project as in beta development and says the code is provided without guarantees regarding stability, security, or backward compatibility.github.com · 5 Oct 2026
Support and feedback
The site directs inquiries to [email protected] and bug reports and feedback to the source repository.releases.apache.org · 5 Oct 2026
Deployment
The repository recommends running ATR with Docker Compose and documents visiting a local HTTPS address using a self-signed certificate.github.com · 5 Oct 2026
Maker
The ASF says it provides software for the public good and is a nonprofit organization.apache.org · 5 Oct 2026

Best Apache Trusted Releases alternatives

See all 20

Where it ranks on Samsung Mobile US Press

Is Apache Trusted Releases yours?

Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.

Sources