- Home
- Artifact repository software
- Nexspence
Nexspence
What it is
Nexspence is a self-hosted artifact repository manager positioned as a drop-in replacement for other artifact repository managers. It supports 15 formats, including Maven, Docker, npm, PyPI, Go Modules, NuGet, Helm, Cargo, Apt, Yum, Conan, Raw, Conda, and Terraform. Formats generally provide Hosted, Proxy, and Group repositories, with listed exceptions. A one-command migration streams repositories, users, and artifacts from a live Nexus instance and is described as pausable and conflict-safe. Storage can use MinIO, AWS S3, Wasabi, or a local filesystem, with blob stores assigned per repository. OIDC/SSO integrations include Keycloak, Google, Azure Entra, and Okta, with just-in-time provisioning and group-to-role mapping. Security controls include LDAP, API tokens, JWT, fine-grained RBAC with CEL selectors, SSRF-protected fetches, and a non-root container. OSV.dev scans Maven, npm, PyPI, and Cargo; Docker and OCI scanning requires operator-supplied Trivy. Deployment options include Docker Compose, Helm/Kubernetes, and native packages for Linux, macOS, and Windows. Nexspence is GNU AGPL v3 or later and free forever.
For and against
For
- Supports 15 artifact formats
- One-command pausable Nexus migration
- OIDC/SSO and group-to-role mapping
- Fine-grained RBAC with CEL selectors
- Free forever with no license fees
Against
- Self-hosted operation requires administration
- Docker and OCI scanning needs Trivy
- Native embedded UI requires PostgreSQL 13 or later
- Audit logs retain 90 days
The verdict
Nexspence combines broad package-format support with migration tooling, external storage choices, identity integrations, and self-managed deployment. Its free license model is useful for teams prepared to operate the infrastructure and supply Trivy for some image scans.
Who it suits
Nexspence suits teams wanting self-hosted package storage, migration from Nexus, and configurable identity or blob storage. It is relevant to organizations deploying on Linux, macOS, Windows, Docker Compose, or Kubernetes.
Plans and prices
Free forever
All product features · No license fees · Self-hosted deployment
Read 15 Oct 2026 · nexspence.com
Supporter
GitHub sponsor badge · Name in SPONSORS.md · Release newsletter
Read 15 Oct 2026 · github.com
Backer
Supporter benefits · Name and link in README · Roadmap-poll input · Release-notes thanks
Read 15 Oct 2026 · github.com
Sponsor
Backer benefits · Logo and link on README and website · Priority issue triage · Maintainer deployment contact
Read 15 Oct 2026 · github.com
Nexspence
No license fees · Free forever
Read 4 Oct 2026 · nexspence.com
On the record
- Architecture
- An independent Habr article describes a Go/Gin backend, React/TypeScript frontend, PostgreSQL metadata storage and a single static binary.habr.com · read 15 Oct 2026
- Artifact formats
- The website lists 15 supported formats, including Maven, npm, Docker, PyPI, Go, NuGet, Helm, Cargo, Apt, Yum/RPM, Conan, Raw, Conda and Terraform.nexspence.com · read 15 Oct 2026
- Audit logging
- The product keeps a 90-day audit trail with date and user filters and NDJSON streaming export.nexspence.com · read 15 Oct 2026
- Audit logs
- Audit logs have 90-day retention and support NDJSON streaming export.nexspence.com · read 4 Oct 2026
- Authorization
- RBAC uses roles, privileges and CEL content selectors for path-level repository permissions.nexspence.com · read 15 Oct 2026
- Cleanup policies
- Automated cleanup can use maximum age, last-download thresholds or retain-N-versions rules scheduled by cron.nexspence.com · read 15 Oct 2026
- CLI
- The project publishes a separate Go command-line tool named nxs for Nexspence administration.github.com · read 15 Oct 2026
- Deployment
- Deployment options include Docker Compose, Helm/Kubernetes, and native packages or archives for Linux, macOS, and Windows.nexspence.com · read 4 Oct 2026
- Documentation
- The documentation covers installation, high availability, SSO, repositories, format guides, RBAC, webhooks, migration, monitoring, promotion, replication and REST APIs.nexspence.com · read 15 Oct 2026
- Funding model
- GitHub Sponsors states that sponsorship funds infrastructure, CI and development while the software remains AGPLv3 and free.github.com · read 15 Oct 2026
- Identity integrations
- Built-in OIDC/OAuth2 SSO supports Keycloak, Google, Microsoft Entra ID and Okta, with JIT provisioning and group-to-role mapping.nexspence.com · read 15 Oct 2026
- Infrastructure as code
- The official Terraform provider manages repositories, blob stores, users, roles, privileges, cleanup policies, webhooks, and promotion rules.nexspence.com · read 4 Oct 2026
- Install options
- Deployment options include Docker Compose, Helm/Kubernetes, Linux deb or rpm packages, macOS archives with launchd and Windows service packages.nexspence.com · read 15 Oct 2026
- LDAP
- LDAP and Active Directory authentication include just-in-time user creation and group-to-role mapping.nexspence.com · read 15 Oct 2026
- License
- The site states Nexspence is licensed under GNU AGPL v3 or later.nexspence.com · read 4 Oct 2026
- Limit: database dependency
- The native single-binary installation still requires an external PostgreSQL database.nexspence.com · read 15 Oct 2026
- Limit: disclosed security issues
- The v2.9.2 release documented five security fixes, including a critical exposure of Apt signing credentials and several high-severity authorization issues.github.com · read 15 Oct 2026
- Limit: Trivy dependency
- Docker and OCI image scanning is unavailable until the operator supplies and configures a separate Trivy binary.nexspence.com · read 15 Oct 2026
