FREEDOM251

Freedom251 › Artifact repository software

NORA

Free plan LinuxSelf-hostedWeb

Visit NORA Alternatives Pricing

NORA's own site

What NORA is

NORA, or No-nonsense Open Registry for Artifacts, is a self-hosted, open-source artifact registry built with Rust. It supports 13 registry formats, including Docker, Maven, npm, PyPI, Cargo, Go, and Raw. It can proxy upstream registries and cache artifacts locally; its curation layer offers allowlists, blocklists, CVE blocking, and integrity verification. Curation can be turned off, used for auditing, or set to enforce rules by blocking matching requests with a 403 response. NORA runs as a single binary, with no database or Java dependency; the documentation describes a binary under 23 MB and startup in about three seconds. Deployment options include Docker and a Kubernetes Helm chart, and storage can use AWS S3, Ceph RGW, or other S3-compatible backends. A mirror CLI supports offline synchronization in air-gapped environments. Authentication can be enabled using an htpasswd file or a setting. NORA is MIT-licensed and listed as free forever.

Who it suits

NORA suits teams that need a self-hosted registry for artifacts across multiple package formats. Its proxying, curation, and offline synchronization features may be useful in environments with specific artifact controls or air-gap requirements.

What it does well

  • Supports 13 registry formats
  • Proxies upstream registries and caches artifacts locally
  • Curation includes blocklists, allowlists, and integrity verification
  • Mirror CLI supports offline synchronization

What to know first

  • Requires self-hosted deployment
  • Runs as a single binary rather than a hosted service

Plans

PlanBilled and limitsPrice
NORAMIT licensed · self-hosted artifact registryFree

As getnora.dev lists them, read 9 Oct 2026. The maker's own page has the final word.

Verdict

NORA combines multi-format artifact storage with upstream caching and configurable curation in a self-hosted package. Its MIT license and listed free plan make it a no-cost option for teams prepared to deploy and operate it themselves.

Facts from NORA's own pages

Authentication
The quick start shows enabling authentication with an htpasswd file, and says authentication can be enabled with NORA_AUTH_ENABLED=true. · getnora.dev, 9 Oct 2026
Client integrations
The quick start demonstrates using Docker, npm, Go modules, and Helm OCI with a NORA registry. · getnora.dev, 9 Oct 2026
Curation
Its curation layer supports blocklists, allowlists, CVE blocking, and integrity verification. · getnora.dev, 9 Oct 2026
Curation integration
The maker documents Dozor as a companion tool that creates OSV advisory blocklists for NORA to enforce. · github.com, 9 Oct 2026
Curation modes
Curation can be set to off, audit, or enforce; enforce mode blocks matching requests with a 403 response. · getnora.dev, 9 Oct 2026
Deployment
The maker documents running NORA with Docker and provides a Kubernetes Helm chart. · getnora.dev, 9 Oct 2026
License
The maker describes NORA as open source under the MIT License and free forever. · getnora.dev, 9 Oct 2026
Maintainer
The repository says NORA was created and is maintained by Pavel Volkov. · github.com, 9 Oct 2026
Product
NORA (No-nonsense Open Registry for Artifacts) is an open-source, multi-protocol artifact registry built with Rust. · getnora.dev, 9 Oct 2026
Proxy and cache
NORA can transparently proxy upstream registries and cache artifacts locally. · getnora.dev, 9 Oct 2026
Registry formats
The documentation lists support for 13 formats, including Docker, Maven, npm, PyPI, Cargo, Go, and Raw. · getnora.dev, 9 Oct 2026
Startup and footprint
The documentation describes a single binary with no database or Java dependency, a startup time of about three seconds, and a binary under 23 MB. · getnora.dev, 9 Oct 2026
Storage integration
The maker lists AWS S3, Ceph RGW, and other S3-compatible backends for storage. · github.com, 9 Oct 2026
Support for air-gapped use
NORA includes a mirror CLI for offline synchronization in air-gapped environments. · github.com, 9 Oct 2026

Where NORA stands on Freedom251

Look at these too