JSR
What it is
JSR is a free, open-source package registry for JavaScript and TypeScript, available through web and API access. It accepts TypeScript source, creates documentation and declaration files, and transpiles code for compatibility across runtimes. Packages are distributed as web-standard ECMAScript modules intended for Node.js, Deno, Bun, browsers, and more. Developers can add packages with Deno, pnpm, Yarn, npm, or Bun tooling. JSR generates package documentation from source and JSDoc comments, and assigns package scores that can filter search results. GitHub Actions publishing can use OIDC without configured secrets or authentication. Other CI providers can publish with a personal access token, but token publishing does not create provenance attestations. GitHub Actions releases can include SLSA provenance statements recorded in Sigstore Rekor. Published versions are immutable and generally cannot be changed or deleted. JSR operates under the MIT License, is run by Deno, and is designed to remain free. The Free plan costs nothing, with quotas applying to scopes and package versions.
For and against
For
- Accepts TypeScript source and generates declarations
- Web-standard ECMAScript module distribution
- Supports Node.js, Deno, Bun, and browsers
- Automatic documentation from source and JSDoc
- GitHub Actions OIDC publishing without secrets
Against
- Private packages are not supported
- Package size is limited to 20 MB
- Quotas apply to scopes and package versions
- Versions generally cannot be changed or deleted
The verdict
JSR combines TypeScript-focused publishing with cross-runtime ECMAScript modules and automated documentation. Its free model and immutable versions suit public package distribution, while quota and private-package limits matter for some projects.
Who it suits
JSR suits JavaScript and TypeScript developers distributing packages across multiple runtimes. It also fits teams seeking generated documentation, scored package searches, and provenance options for GitHub Actions publishing.
Plans and prices
Free
Always free to use; quotas apply to scopes and package versions
Read 7 Oct 2026 · jsr.io
On the record
- Automatic documentation
- JSR automatically generates package documentation from source code and JSDoc comments.jsr.io · read 7 Oct 2026
- ES modules
- JSR packages are distributed as web-standard ECMAScript modules.jsr.io · read 7 Oct 2026
- GitHub Actions publishing
- JSR supports publishing from GitHub Actions using OIDC without configuring secrets or authentication.jsr.io · read 7 Oct 2026
- Immutable versions
- Published package versions are immutable and generally cannot be changed or deleted.jsr.io · read 7 Oct 2026
- Open source
- JSR is open source and licensed under the MIT License.jsr.io · read 7 Oct 2026
- Operator and funding
- JSR is currently operated by the Deno company, which pays its hosting bills; JSR says it is designed to always be free to use.jsr.io · read 7 Oct 2026
- Other CI publishing
- Publishing from other CI providers is supported with a personal access token, and token-based publishing does not generate provenance attestations.jsr.io · read 7 Oct 2026
- Package managers
- JSR packages can be added with Deno, pnpm, Yarn, npm, or Bun tooling.jsr.io · read 7 Oct 2026
- Package scoring
- JSR provides package scoring and supports filtering package search by score.jsr.io · read 7 Oct 2026
- Provenance
- For packages published from GitHub Actions, JSR can create SLSA provenance statements stored in the Sigstore Rekor transparency log.jsr.io · read 7 Oct 2026
- Runtime compatibility
- JSR says packages work with Node.js, Deno, Bun, browsers, and more.jsr.io · read 7 Oct 2026
- TypeScript support
- JSR accepts TypeScript source and generates package documentation and declaration files, and transpiles code for cross-runtime compatibility.jsr.io · read 7 Oct 2026
- Usage limits
- JSR applies quotas to scopes and package versions to prevent abuse and says users can request quota increases by email.jsr.io · read 7 Oct 2026
- What it is
- JSR is a modern package registry for JavaScript and TypeScript.jsr.io · read 7 Oct 2026
