Freedom251 › Artifact repository software
OmniRepo
What OmniRepo is
OmniRepo is a free, self-hosted artifact registry that serves multiple artifact types from a single container. It supports OCI, RPM, APT, PyPI, Helm, Go, npm, Maven, Git, S3, and raw blobs. It can mirror upstream APT, RPM, PyPI, and Helm repositories; optional upstream credentials are encrypted at rest. Trivy is built in to scan artifacts, and repository severity thresholds can block pulls.
Artifacts use shared content-addressed storage. Actions are recorded in SQLite, with an NDJSON mirror, and the container includes an OpenAPI 3.1 REST API and Swagger UI. The maker describes deployment on one Linux host with Docker; the shipped image architecture is linux/amd64. At launch, accounts are local, passwords use Argon2id hashing, and sessions use cookies. OIDC and LDAP are roadmap items. The maker presents OmniRepo for small-to-mid teams and air-gapped corporate environments. It is free to self-host forever in one container and has no paid tier. The maker says it does not include federation, high-availability clustering, or an in-process scheduler. Bug reports and feature requests go through GitHub issues, and pull requests are accepted.
Who it suits
OmniRepo suits small-to-mid teams that want to host multiple artifact types on their own Linux server. Its single-container deployment and outbound HTTP behavior may also suit air-gapped corporate environments.
What it does well
- Serves OCI, RPM, APT, PyPI, Helm, Go, npm, Maven, Git, S3, and raw blobs.
- Built-in Trivy scans with repository severity thresholds that can block pulls.
- Mirrors APT, RPM, PyPI, and Helm upstreams.
- Includes an OpenAPI 3.1 REST API and Swagger UI.
- Free to self-host forever, with no paid tier.
What to know first
- Shipped image architecture is linux/amd64.
- OIDC and LDAP are roadmap items; launch authentication uses local accounts.
- Does not include federation, high-availability clustering, or an in-process scheduler.
Limits
The free self-hosted plan runs in a single container and has no paid tier. OmniRepo does not include federation, high-availability clustering, or an in-process scheduler; OIDC and LDAP are roadmap items.
Plans
| Plan | Billed and limits | Price |
|---|---|---|
| Free self-hosted | Free to self-host forever · no paid tier · single container | Free |
As hoardgoblin.com lists them, read 7 Oct 2026. The maker's own page has the final word.
Getting started
- Visit the HoardGoblin website.
- Prepare one Linux host with Docker.
- Deploy the shipped linux/amd64 container image.
- Create local accounts to use the registry.
- Use the included REST API or Swagger UI as needed.
Verdict
Choose OmniRepo if you need a free, self-hosted registry for varied artifact types, with scanning and upstream mirrors in one container. Look elsewhere if your deployment depends on federation, high-availability clustering, an in-process scheduler, or OIDC or LDAP authentication.
Questions
How much does OmniRepo cost?
The Free self-hosted plan costs nothing. The maker describes it as free to self-host forever, with no paid tier.
Is OmniRepo self-hosted?
Yes. The maker describes deployment on one Linux host with Docker, using a single container.
Which platforms and image architecture are listed?
The listed platforms are API, Linux, self-hosted, and web. The shipped image architecture is linux/amd64.
Does OmniRepo have a free trial?
No free trial is listed; OmniRepo has a free plan.
What authentication does it support?
At launch, it uses local accounts, Argon2id password hashing, and session cookies. OIDC and LDAP are roadmap items.
Can I get support or contribute?
The maker directs bug reports and feature requests to GitHub issues and accepts pull requests.
Facts from OmniRepo's own pages
- API
- An OpenAPI 3.1 REST API and Swagger UI are included in the container. · hoardgoblin.com, 7 Oct 2026
- Audience
- The maker describes OmniRepo as intended for small-to-mid teams and air-gapped corporate environments. · hoardgoblin.com, 7 Oct 2026
- Authentication
- At launch, OmniRepo uses local accounts with Argon2id password hashing and session cookies; the maker says OIDC and LDAP are roadmap items. · hoardgoblin.com, 7 Oct 2026
- Deployment
- The maker describes deployment as one Linux host with Docker and lists the shipped image architecture as linux/amd64. · hoardgoblin.com, 7 Oct 2026
- Mirrors
- It can mirror APT, RPM, PyPI, and Helm upstreams, with optional stored upstream credentials encrypted at rest. · hoardgoblin.com, 7 Oct 2026
- Notable limits
- The maker says OmniRepo does not include federation, high-availability clustering, or an in-process scheduler. · hoardgoblin.com, 7 Oct 2026
- Product
- OmniRepo is a self-hosted artifact registry that serves multiple artifact types in one container. · hoardgoblin.com, 7 Oct 2026
- Protocols
- It supports OCI, RPM, APT, PyPI, Helm, Go, npm, Maven, Git, S3, and raw blobs. · hoardgoblin.com, 7 Oct 2026
- Security
- The binary makes no outbound HTTP calls without an explicit admin action, and the maker says this is checked in CI. · hoardgoblin.com, 7 Oct 2026
- Storage and audit
- Artifacts use shared content-addressed storage, and actions are logged to SQLite with an NDJSON mirror. · hoardgoblin.com, 7 Oct 2026
- Support
- The maker directs users to GitHub issues for bugs and feature requests and accepts pull requests. · hoardgoblin.com, 7 Oct 2026
- Vulnerability scanning
- Trivy is embedded and scans artifacts, with per-repository severity thresholds that can block pulls. · hoardgoblin.com, 7 Oct 2026
Where OmniRepo stands on Freedom251
- Artifact repository software#23 of 64