- Home
- Artifact repository software
- OmniRepo
On the recordRead 7 Oct 202612 facts
OmniRepo
Plans and prices
Free self-hosted
Free
Free to self-host forever · no paid tier · single container
Read 7 Oct 2026 · hoardgoblin.com
On the record
- API
- An OpenAPI 3.1 REST API and Swagger UI are included in the container.hoardgoblin.com · read 7 Oct 2026
- Audience
- The maker describes OmniRepo as intended for small-to-mid teams and air-gapped corporate environments.hoardgoblin.com · read 7 Oct 2026
- Authentication
- At launch, OmniRepo uses local accounts with Argon2id password hashing and session cookies; the maker says OIDC and LDAP are roadmap items.hoardgoblin.com · read 7 Oct 2026
- Deployment
- The maker describes deployment as one Linux host with Docker and lists the shipped image architecture as linux/amd64.hoardgoblin.com · read 7 Oct 2026
- Mirrors
- It can mirror APT, RPM, PyPI, and Helm upstreams, with optional stored upstream credentials encrypted at rest.hoardgoblin.com · read 7 Oct 2026
- Notable limits
- The maker says OmniRepo does not include federation, high-availability clustering, or an in-process scheduler.hoardgoblin.com · read 7 Oct 2026
- Product
- OmniRepo is a self-hosted artifact registry that serves multiple artifact types in one container.hoardgoblin.com · read 7 Oct 2026
- Protocols
- It supports OCI, RPM, APT, PyPI, Helm, Go, npm, Maven, Git, S3, and raw blobs.hoardgoblin.com · read 7 Oct 2026
- Security
- The binary makes no outbound HTTP calls without an explicit admin action, and the maker says this is checked in CI.hoardgoblin.com · read 7 Oct 2026
- Storage and audit
- Artifacts use shared content-addressed storage, and actions are logged to SQLite with an NDJSON mirror.hoardgoblin.com · read 7 Oct 2026
- Support
- The maker directs users to GitHub issues for bugs and feature requests and accepts pull requests.hoardgoblin.com · read 7 Oct 2026
- Vulnerability scanning
- Trivy is embedded and scans artifacts, with per-repository severity thresholds that can block pulls.hoardgoblin.com · read 7 Oct 2026