- Home
- Artifact repository software
- Artifact Keeper
Artifact Keeper
What it is
Artifact Keeper is a free, self-hostable artifact registry for storing and managing software packages. It supports more than 45 package formats, with local, proxy, and virtual repositories and WebAssembly plugins for custom format handlers. Proxies can connect to npmjs.com, PyPI, Maven Central, and Docker Hub. Security capabilities include vulnerability alerts, SBOM analysis, and compliance scanning through included Trivy, OpenSCAP, and OWASP Dependency-Track integrations. Repository permissions, role-based access control, API keys, and single sign-on through LDAP, SAML 2.0, or OIDC manage access. GPG and cosign signing, full action auditing, and encryption at rest and in transit are listed. Artifactory migration tooling imports repositories, artifacts, metadata, users, and permissions using a read-only process with integrity checks. Storage supports filesystem and S3-compatible services. The free plan includes all features and has no per-user fees. Android and iOS apps are described as coming soon.
For and against
For
- Supports more than 45 package formats
- Local, proxy, and virtual repositories
- Includes vulnerability and SBOM scanning
- LDAP, SAML, and OIDC single sign-on
- No per-user fees; all features included
Against
- Android and iOS apps are not yet available
- Self-hosted deployment requires infrastructure
- Migration tooling is specifically for Artifactory
The verdict
Artifact Keeper offers a broad registry feature set under a free MIT-licensed plan, including security, signing, migration, and observability integrations. Its self-hosted approach and forthcoming mobile apps are important considerations for deployment planning.
Who it suits
It suits teams wanting a free, self-hosted registry with broad package support, upstream proxies, security scanning, and enterprise access controls.
Plans and prices
Artifact Keeper
No per-user fees · All features included · MIT licensed
Read 3 Oct 2026 · artifactkeeper.com
On the record
- Access control
- It supports fine-grained repository permissions, RBAC, API keys, and SSO through LDAP, SAML, and OIDC.artifactkeeper.com · read 3 Oct 2026
- Deployment
- The maker documents Docker Compose and Kubernetes Helm deployments, and its installation guide describes Windows support as beta.artifactkeeper.com · read 3 Oct 2026
- Encryption
- The site states that encryption at rest and in transit is standard.artifactkeeper.com · read 3 Oct 2026
- Integrations
- Trivy, OpenSCAP, OWASP Dependency-Track, OpenSearch, PostgreSQL, S3-compatible storage, LDAP, SAML 2.0, OIDCartifactkeeper.com · read 15 Sep 2026
- Migration
- Its Artifactory migration tooling can import repositories, artifacts, metadata, users, and permissions, and the site describes the migration as read-only with integrity checks.artifactkeeper.com · read 3 Oct 2026
- Mobile availability
- The website says Android and iOS apps are coming soon; it describes native macOS, iOS, and Android apps, but does not give app store download links as available.artifactkeeper.com · read 3 Oct 2026
- Observability
- It provides Prometheus metrics and optional OpenTelemetry tracing with OTLP export to Jaeger, Tempo, or Datadog.github.com · read 3 Oct 2026
- Package formats
- It supports more than 45 package formats and allows custom format handlers through a WebAssembly plugin system.github.com · read 3 Oct 2026
- Product
- Artifact Keeper is a self-hostable artifact registry described as an open-source alternative to JFrog Artifactory and Sonatype Nexus.github.com · read 3 Oct 2026
- Repository types
- It supports local, proxy, and virtual repositories, including proxies for public registries such as npmjs.com, PyPI, Maven Central, and Docker Hub.github.com · read 3 Oct 2026
- Security scanning
- The site says Trivy, OpenSCAP, and Dependency-Track are included; its security features include vulnerability alerts, SBOM analysis, and compliance scanning.artifactkeeper.com · read 3 Oct 2026
- Signing and audit
- The site lists GPG and cosign artifact signing and a full audit trail of actions.artifactkeeper.com · read 3 Oct 2026
- Storage integrations
- The installation guide documents filesystem and S3-compatible storage, including AWS S3, MinIO, and DigitalOcean Spaces.artifactkeeper.com · read 3 Oct 2026
- Support
- The site offers migration planning and execution, architecture review, and priority bug fixes as support and consulting.artifactkeeper.com · read 3 Oct 2026
