Gemfury

Gemfury is a hosted repository for distributing software packages across a broad range of ecosystems. It is best suited to developers and teams who want to use familiar package-management workflows without operating their own repository. The free tier works for public packages, while private hosting starts at $9 a month.

Overview

Gemfury hosts public and private packages across RubyGems, npm, PyPI, Go Modules, Composer, Maven, DEB, RPM, Bower and NuGet. That range can suit teams distributing software in several formats; those working in only one ecosystem may not need such breadth. Gemfury is hosted rather than self-hosted, so it is not the fit for organizations that need to run the repository on their own infrastructure.

Packages can be uploaded through the web interface or command line, then installed from a Gemfury Repo URL with existing package-management tools. That approach keeps private-package deployment within familiar workflows. Gemfury says a secret token in the URL protects packages during deployment, and that uploads, deployments and installations use SSL.

Key features

Package hosting and access

All listed plans include unlimited versions and SSL protection. Public packages are unlimited even on the free plan, but private packages require a paid plan. An upstream proxy is supported, which may be useful in a repository workflow that needs one; no plan-specific proxy limits are given.

Collaboration and controls

Gemfury lets users share an account with coworkers. Personal plans set a collaborator ceiling, while team plans allow unlimited collaborators and instead cap the number of private packages. Business plans add separate billing, multi-ownership and fine-grained permission control, a better fit for organizations that need distinct ownership and access management. Customers can also access service-account data through an API.

Gemfury says transmitted data is protected with SSL encryption and stored information and data are backed up. It asks people to report security concerns privately by email and says those reports receive its highest priority. After cancellation, packages are deleted one month later and cannot be recovered, so customers should preserve any packages they need before closing an account.

Pricing

Gemfury uses a freemium model. Its 14-day free trial has no credit-card requirement and no usage limits during the trial. The free plan costs nothing and allows unlimited collaborators and public packages, unlimited versions, SSL protection and free setup, but no private packages.

All paid plans include unlimited public packages and versions, SSL protection and free setup. The Personal plans trade a collaborator cap for unlimited private packages, making them suitable when private-package count matters more than open-ended team size. Team plans allow unlimited collaborators but cap private packages, which suits a larger group with a known repository footprint. The free plan is a clear starting point for public-only distribution, but cannot serve as a private package store. Gemfury directs customers to email for larger plans or other pricing questions; those plans have custom pricing.

Platforms

Gemfury supports API, Linux, macOS, web and Windows.

Who it's for

Gemfury is a sensible choice for developers who want hosted package distribution and the convenience of using existing package managers, particularly when they need private packages or collaborate within one of the paid plans' seat or package limits. Public-only projects can use the free plan without a collaborator cap. Teams that need unlimited collaborators should compare the Team package caps against their expected private repositories before choosing. Organizations requiring self-hosting should look elsewhere.

Pros and cons

• Broad format support: Ten package formats make Gemfury relevant to teams distributing across multiple ecosystems.
• Familiar installation workflow: Private packages can be deployed through a Repo URL and existing package-management tools.
• Clear paid-plan tradeoff: Personal plans provide unlimited private packages with collaborator caps; Team plans remove the collaborator cap but limit private packages.
• Free plan excludes private packages: It supports public distribution but cannot host a private package repository.
• Hosted only: There is no self-hosted option for organizations that need to operate the repository themselves.
• Cancellation is consequential: Packages are deleted one month after account cancellation and cannot be recovered afterward.

Alternatives

For a broader comparison, see Artifact repository software. Choose Cloudsmith instead if its free open-source plan's 50 GB of artifact data and 200 GB of package delivery suit your needs. Sonatype Nexus Repository is an alternative if you want a self-hosted platform option alongside API, Linux, web and Windows support; its free Community Edition includes full ecosystem support, CI/CD integration and an external PostgreSQL database option.

Buildkite may suit readers looking for a build platform, with a free plan for up to five users and ten concurrent jobs. Inedo ProGet offers a free edition with unlimited feeds for private packages and Docker, although its free edition has limited security and compliance features. Kellnr is a free, self-hosted Rust crate registry under the MIT license.

Nexspence is another free software option, with a paid Supporter plan at $5 a month. Packagecloud may fit a reader whose requirements align with its free plan's 10 GB of bandwidth and 2 GB of storage, or its Starter plan at $89 a month. pypiserver is a free, self-hosted package server with a minimal PyPI-compatible API, so it is a narrower option for Python package hosting.

Verdict

Choose Gemfury if you want a hosted package repository that works with existing package tools, supports ten package formats and offers a plan structure that separates collaborator limits from private-package caps. Its free tier is useful for public packages, but private hosting has a monthly cost and cancellation leads to unrecoverable deletion after one month. Look elsewhere if you need self-hosting, or if your expected team size and private-package count do not fit the available plan limits.