Freedom251 › Artifact repository software
Artifact Keeper
What Artifact Keeper is
Artifact Keeper is a free, self-hostable artifact registry for storing and managing software packages and related artifacts. It supports more than 45 package formats and local, proxy, and virtual repositories, including proxies for public registries such as npmjs.com, PyPI, Maven Central, and Docker Hub. Custom format handlers can be added through a WebAssembly plugin system. Security features include vulnerability alerts, SBOM analysis, and compliance scanning, with Trivy, OpenSCAP, and OWASP Dependency-Track included. Access controls include repository permissions, role-based access, API keys, and single sign-on through LDAP, SAML 2.0, or OIDC. Artifact signing supports GPG and cosign, and the product lists an audit trail. The site says encryption at rest and in transit is standard. Migration tooling can import repositories, artifacts, metadata, users, and permissions from Artifactory using a read-only process with integrity checks. Storage options include filesystem and S3-compatible services. The free plan includes all features and has no per-user fees. Android and iOS apps are described as coming soon, rather than as available downloads.
Who it suits
Artifact Keeper suits teams that want a self-hostable registry with package-format support, repository controls, and security scanning. It may also suit organizations migrating from Artifactory or using S3-compatible storage.
What it does well
- Supports more than 45 package formats.
- Free plan includes all features.
- No per-user fees are listed.
- Migration tooling includes integrity checks.
- Supports LDAP, SAML 2.0, and OIDC.
What to know first
- Android and iOS apps are described as coming soon.
- Self-hosting may require managing storage and deployment.
Plans
| Plan | Billed and limits | Price |
|---|---|---|
| Artifact Keeper | No per-user fees · All features included · MIT licensed | Free |
As artifactkeeper.com lists them, read 3 Oct 2026. The maker's own page has the final word.
Getting started
- Visit the Artifact Keeper website.
- Choose a deployment approach: cloud, desktop, or self-hosted.
- Configure filesystem or S3-compatible storage.
- Connect any needed identity, security, or observability integrations.
- Create local, proxy, or virtual repositories.
Verdict
Artifact Keeper offers broad package-format and repository support with security and access-control features in a free plan. Its listed mobile apps are not presented as available downloads.
Questions
How much does Artifact Keeper cost?
Its Artifact Keeper plan is free, with no per-user fees and all features included.
Is Artifact Keeper open source?
It is described as an open-source alternative to JFrog Artifactory and Sonatype Nexus. The plan is MIT licensed.
Which package formats and repository types does it support?
It supports more than 45 package formats, plus custom format handlers through a WebAssembly plugin system. Repository types include local, proxy, and virtual.
What platforms are listed?
The listed platforms are API, macOS, self-hosted, and web. Android and iOS apps are described as coming soon.
Which integrations are listed?
Integrations include Trivy, OpenSCAP, OWASP Dependency-Track, OpenSearch, PostgreSQL, S3-compatible storage, LDAP, SAML 2.0, and OIDC.
Can it import from Artifactory?
Its migration tooling can import repositories, artifacts, metadata, users, and permissions through a read-only process with integrity checks.
Facts from Artifact Keeper's own pages
- Access control
- It supports fine-grained repository permissions, RBAC, API keys, and SSO through LDAP, SAML, and OIDC. · artifactkeeper.com, 3 Oct 2026
- Deployment
- The maker documents Docker Compose and Kubernetes Helm deployments, and its installation guide describes Windows support as beta. · artifactkeeper.com, 3 Oct 2026
- Encryption
- The site states that encryption at rest and in transit is standard. · artifactkeeper.com, 3 Oct 2026
- Integrations
- Trivy, OpenSCAP, OWASP Dependency-Track, OpenSearch, PostgreSQL, S3-compatible storage, LDAP, SAML 2.0, OIDC · artifactkeeper.com, 15 Sept 2026
- Migration
- Its Artifactory migration tooling can import repositories, artifacts, metadata, users, and permissions, and the site describes the migration as read-only with integrity checks. · artifactkeeper.com, 3 Oct 2026
- Mobile availability
- The website says Android and iOS apps are coming soon; it describes native macOS, iOS, and Android apps, but does not give app store download links as available. · artifactkeeper.com, 3 Oct 2026
- Observability
- It provides Prometheus metrics and optional OpenTelemetry tracing with OTLP export to Jaeger, Tempo, or Datadog. · github.com, 3 Oct 2026
- Package formats
- It supports more than 45 package formats and allows custom format handlers through a WebAssembly plugin system. · github.com, 3 Oct 2026
- Product
- Artifact Keeper is a self-hostable artifact registry described as an open-source alternative to JFrog Artifactory and Sonatype Nexus. · github.com, 3 Oct 2026
- Repository types
- It supports local, proxy, and virtual repositories, including proxies for public registries such as npmjs.com, PyPI, Maven Central, and Docker Hub. · github.com, 3 Oct 2026
- Security scanning
- The site says Trivy, OpenSCAP, and Dependency-Track are included; its security features include vulnerability alerts, SBOM analysis, and compliance scanning. · artifactkeeper.com, 3 Oct 2026
- Signing and audit
- The site lists GPG and cosign artifact signing and a full audit trail of actions. · artifactkeeper.com, 3 Oct 2026
- Storage integrations
- The installation guide documents filesystem and S3-compatible storage, including AWS S3, MinIO, and DigitalOcean Spaces. · artifactkeeper.com, 3 Oct 2026
- Support
- The site offers migration planning and execution, architecture review, and priority bug fixes as support and consulting. · artifactkeeper.com, 3 Oct 2026
Where Artifact Keeper stands on Freedom251
- Artifact repository software#4 of 64