No. 22 of 36 ·Release Management Software

Apache Trusted Releases

Web · Self-hosted · API

Freedom report

One barScore 5.3

Free tierNo free tier on record
Open codeNo open-source code on record
Runs widely1 of 6 device platforms
DocumentedPlans, terms and facts published

Apache Trusted Releases is ranked #22 of 36 in release management software on Freedom251. It runs on API, Self-hosted, Web.

Compared on release management software

Release workflows: Yes
Approval gates: Yes

Best Apache Trusted Releases alternatives

See all 20

Two bars Flagsmith Free tier No. 1$40/mo6.7 Two bars ConfigCat Free tier No. 2$110/mo6.6 Two bars LaunchDarkly Experimentation Free tier No. 3$108.33/mo6.5 Two bars Statsig Free tier No. 4$150/mo6.5 One bar Blue Canvas Free tier No. 5$300/mo6.4 One bar Devtron Release Orchestration Free tier No. 6$499/mo6.4

The record

Purpose: Apache Trusted Releases is a platform intended to verify and distribute Apache releases securely.
Intended users: Its users include Apache project participants who publish software and end users who obtain it.
Release workflow: The documented workflow is to compose a candidate release, hold a PMC vote, and publish and announce the release if the vote passes.
Interfaces: The platform offers a web interface, JSON API, command-line interface, GitHub Actions, and a Maven plugin.
Artifact checks: Automated checks cover signatures, hashes, archive layout, licensing, and SBOM content before a vote.
Release catalog: ATR maintains a catalog of current and archived release artifacts for end users.
SBOM analysis: For CycloneDX SBOM files, ATR evaluates NTIA 2021 conformance, validation results, license signals, and vulnerability data.
Additional SBOM tools: ATR can generate a CycloneDX SBOM from an archive, score or augment an SBOM, and run an OSV vulnerability scan.
Access: The live platform asks users to log in with an ASF account, and the Tooling site says users get access to their PMC's projects.
Beta availability: The ASF Tooling site says ASF PMCs and incubating podlings may participate in beta testing.
Development status: The source repository describes the project as in beta development and says the code is provided without guarantees regarding stability, security, or backward compatibility.
Support and feedback: The site directs inquiries to [email protected] and bug reports and feedback to the source repository.
Deployment: The repository recommends running ATR with Docker Compose and documents visiting a local HTTPS address using a self-signed certificate.
Maker: The ASF says it provides software for the public good and is a nonprofit organization.

Where it ranks on Freedom251

Best Release Management Software in 2026#22 of 36

Is Apache Trusted Releases yours?

Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.

Claim it free Promote Apache Trusted Releases

Sources

releases.apache.org/docs/introduction-to-atr· checked 5 Oct 2026
releases.apache.org/docs/checks· checked 5 Oct 2026
releases.apache.org· checked 5 Oct 2026
tooling.apache.org· checked 5 Oct 2026
github.com/apache/tooling-trusted-releases· checked 5 Oct 2026
apache.org· checked 5 Oct 2026