Private Packagist

Plans and prices

Every plan, in full

On the record

API

The pricing page lists API access among the features included in all plans.packagist.com · read 4 Oct 2026

Company origin

Private Packagist was founded by Composer creators Jordi Boggiano and Nils Adermann.packagist.com · read 4 Oct 2026

Integrations

Organization synchronization is available for GitHub, Bitbucket, and GitLab, including synchronization of teams, members, permissions, and repositories.packagist.com · read 4 Oct 2026

Intended users

The company describes Private Packagist as providing businesses with functionality tailored to their requirements and offers solutions for agencies and vendors.packagist.com · read 4 Oct 2026

License review

License Review lists open-source licenses used by dependencies across an organization and lets users browse packages by license.packagist.com · read 4 Oct 2026

Mirroring

It mirrors third-party Composer dependencies so installs can continue when upstream repositories or package hosts are unavailable.packagist.com · read 4 Oct 2026

Package sources

It can access private code in Git, Mercurial, or Subversion repositories using SSH or HTTP Basic authentication.packagist.com · read 4 Oct 2026

Pull request review

Update Review comments on pull requests with a readable summary of composer.lock changes and links to code diffs and changelogs.packagist.com · read 4 Oct 2026

Purpose

Private Packagist makes private PHP repositories available through Composer and provides a controlled repository for package installs.packagist.com · read 4 Oct 2026

Self-hosted limits

The self-hosted version supports an unlimited number of organizations, but its vendor add-on is unavailable.packagist.com · read 4 Oct 2026

Supply chain controls

The service blocks package versions flagged as malware and can enforce allowed Composer versions and Composer plugin policies server-side.packagist.com · read 4 Oct 2026

Support

Cloud plans include email and chat support, and the pricing FAQ says messages sent by email or website chat receive a guaranteed next-business-day response.packagist.com · read 4 Oct 2026

Vulnerability monitoring

It scans composer.lock files for vulnerable dependency versions and can notify users by email, webhook, Slack, or Microsoft Teams.packagist.com · read 4 Oct 2026

Alternatives to Private Packagist

N NexspenceWebWindows+4 P PackagecloudWebWindows+4 G GemfuryWebWindows+3 IP Inedo ProGetWebWindows+3 SN Sonatype Nexus RepositoryWebWindows+4 B BuildstashAndroidiPhone & iPad+6 OL Omni Line Multipurpose Artifact RegistryWebLinux+2 R RavenstashWebWindows+3

Every alternative, ranked