Freedom251 › Artifact repository software

Artifact Depot

Paid APILinuxSelf-hostedWeb

What Artifact Depot is

Artifact Depot is a free, Apache-2.0 open-source artifact repository manager written in Rust and designed to scale out. It can act as a replacement for or cache alongside Nexus and Artifactory. Deployment is available as a statically linked server binary or a rootless Docker image with an embedded web interface. Supported formats include Raw, Docker/OCI, APT, Yum/DNF, PyPI, npm, Cargo, Helm and Go modules, each with hosted, cache and proxy repository types. Artifact content uses BLAKE3-addressed, deduplicated blobs stored on a filesystem or S3-compatible service. Metadata can use embedded redb for a single node or DynamoDB-compatible storage for clustered installations. Authentication supports JWT bearer tokens and HTTP Basic, with Argon2id password hashing and repository-scoped RBAC. LDAP with group-to-role mapping is feature-gated. OpenTelemetry traces and logs plus Prometheus metrics provide observability. A fresh instance requires an operator to create a blob store before repositories can accept writes.

Who it suits

It suits teams needing self-hosted artifact storage for datacenters, CI pipelines, Kubernetes, air-gapped environments or developer laptops. Its open-source license and scale-out storage options support infrastructure managed by the user.

What it does well

Free Apache-2.0 open source
Supports many package formats
BLAKE3 deduplication reduces duplicate blobs
Repository-scoped RBAC
Prometheus and OpenTelemetry observability

What to know first

Fresh instances require blob-store setup
LDAP requires a feature flag
Clustered metadata needs compatible storage
Self-hosted deployment is required

Verdict

Artifact Depot combines broad repository-format support with self-hosted storage, access controls and scale-out backends. Operators should plan the initial blob-store configuration before accepting repository writes.

Facts from Artifact Depot's own pages

API: The REST API includes repository, artifact, user, role, blob-store, settings, task, backup, and restore operations, plus a Nexus-compatible API subset. · artifactdepot.io, 11 Oct 2026
Audience: The documentation describes use in datacenters, CI pipelines, dev containers, offices, air-gapped clusters, and on developers’ laptops. · artifactdepot.io, 11 Oct 2026
Authentication and access: It supports JWT bearer tokens, HTTP Basic authentication, Argon2id password hashing, repository-scoped RBAC, and feature-gated LDAP with group-to-role mapping. · artifactdepot.io, 11 Oct 2026
Blob storage: Artifact content is BLAKE3-addressed and deduplicated, with filesystem or S3-compatible blob storage options. · artifactdepot.io, 11 Oct 2026
Deployment: It ships as a statically linked server binary or a rootless Docker image with an embedded web UI. · artifactdepot.io, 11 Oct 2026
Formats: It supports Raw, Docker/OCI, APT, Yum/DNF, PyPI, npm, Cargo, Helm, and Go modules; each format supports hosted, cache, and proxy repositories. · artifactdepot.io, 11 Oct 2026
Integrations: The documentation names compatible observability destinations including Jaeger, Honeycomb, Datadog, SigNoz, AWS X-Ray, Azure Monitor, and Splunk via an OTel collector. · artifactdepot.io, 11 Oct 2026
Intended use: The maker describes use in datacenters, CI pipelines, dev containers, Kubernetes clusters, air-gapped environments, and developer laptops. · artifactdepot.io, 11 Oct 2026
LDAP: LDAP authentication with group-to-role mapping is available behind a feature flag. · artifactdepot.io, 11 Oct 2026
License: The linked public GitHub repository identifies the project license as Apache-2.0. · github.com, 11 Oct 2026
Metadata storage: Metadata can use embedded redb for a single node or DynamoDB-compatible storage for clustered deployments. · artifactdepot.io, 11 Oct 2026
Notable setup requirement: A fresh instance does not automatically create a blob store, so an operator or initialization script must create one before repositories can accept writes. · artifactdepot.io, 11 Oct 2026
Observability: Depot exports traces and logs through OpenTelemetry and exposes Prometheus-format metrics at `/metrics`. · artifactdepot.io, 11 Oct 2026
Observability integrations: It exposes Prometheus metrics and exports telemetry through OpenTelemetry; the documentation describes Grafana dashboards and OTel collector integrations with services such as Datadog, Honeycomb, and Splunk. · artifactdepot.io, 11 Oct 2026
Operational limit: On a fresh instance, an operator must create at least one blob store before repositories can accept writes. · artifactdepot.io, 11 Oct 2026
Product: Artifact Depot is a Rust-based, scale-out artifact repository manager positioned as a replacement for Sonatype Nexus and JFrog Artifactory. · artifactdepot.io, 11 Oct 2026
Purpose: Artifact Depot is a safe-Rust, scale-out artifact repository manager intended as a replacement for Nexus and Artifactory or as an artifact cache. · artifactdepot.io, 11 Oct 2026
Repository snapshots: Repository cloning copies metadata while reusing shared blobs, so it does not duplicate artifact data. · artifactdepot.io, 11 Oct 2026
Scale: Multiple instances can share key-value and blob backends, with distributed leases for background jobs and live integrity checks. · artifactdepot.io, 11 Oct 2026
Scale-out: Multiple instances can share DynamoDB-compatible metadata and S3-compatible blob storage, with distributed leases for background jobs. · artifactdepot.io, 11 Oct 2026
Security: Authentication supports JWT bearer tokens and HTTP Basic; passwords are hashed with Argon2id, and repository-scoped RBAC is available. · artifactdepot.io, 11 Oct 2026
Storage: It deduplicates content-addressed blobs with BLAKE3 and supports embedded redb or DynamoDB-compatible key-value stores, plus filesystem or S3-compatible blob storage. · artifactdepot.io, 11 Oct 2026
Supported formats: It supports Raw, Docker/OCI, APT, Yum/DNF, PyPI, npm, Cargo, Helm, and Go modules, with hosted, cache, and proxy repository types. · artifactdepot.io, 11 Oct 2026

Where Artifact Depot stands on Freedom251

Artifact repository software#56 of 64