Freedom251 › Artifact repository software
Pkgly
What Pkgly is
Pkgly is a free, open-source artifact manager for hosting and retrieving software packages. It supports ecosystems including Maven, npm, Python, Composer, Go modules, Cargo, RubyGems, Docker/OCI, Helm, Debian APT, and NuGet. Most listed ecosystems support hosted and proxy repositories; Cargo and Helm are hosted only. Pkgly describes S3 storage with local disk caching, and its feature overview lists a configurable on-disk LRU cache. Administrators can manage users, ACLs, and repository permissions. The service can validate signed tokens from upstream providers and supports OAuth2 login with Google or Microsoft Entra ID. Audit events cover successful and denied actions across management, package operations, search and listing, and repository traffic. Admin-managed webhooks handle package publication and deletion events with a durable retry queue. Per-repository cleanup is disabled by default. Setup options include local Docker Compose and a Kubernetes Helm chart; the pkglyctl client works through HTTP APIs and repository routes. Pkgly is available through web and Linux, as an API, and as a self-hosted deployment. Its plan is free.
Who it suits
Pkgly suits developers or organizations looking for a free artifact manager with self-hosting options. Its package ecosystem support and access controls may also fit teams managing repositories across different formats.
What it does well
- Supports a broad range of package ecosystems.
- Can be self-hosted with Docker Compose or Kubernetes Helm.
- Provides users, ACLs, and repository permissions.
- Includes audit events and package webhooks.
- Free and open source.
What to know first
- Cargo and Helm are hosted repositories only.
- Repository cleanup is disabled by default.
- The described access includes web, Linux, and API.
Plans
| Plan | Billed and limits | Price |
|---|---|---|
| Free and open source | Self-hosted package registry | Free |
As pkgly.dev lists them, read 9 Oct 2026. The maker's own page has the final word.
Verdict
Pkgly brings package hosting, proxying, access controls, and audit features into a free, open-source artifact manager. Check the repository-mode limits for Cargo and Helm, and note that cleanup must be enabled when needed.
Facts from Pkgly's own pages
- Access control
- Pkgly provides users, ACLs, and repository permissions for controlling access. · pkgly.dev, 9 Oct 2026
- Audit logging
- The feature overview says audit events record successful and denied user actions across management routes, package operations, search/listing, and repository traffic. · docs.pkgly.dev, 9 Oct 2026
- CLI
- The pkglyctl terminal client operates a Pkgly instance through its HTTP APIs and repository routes. · docs.pkgly.dev, 9 Oct 2026
- Deployment
- The quickstart covers local Docker Compose and Kubernetes Helm chart setup. · docs.pkgly.dev, 9 Oct 2026
- Integrations
- The documentation describes SSO integrations with Cloudflare Access, Okta, Auth0, Azure B2C, Google, and Microsoft Entra ID. · docs.pkgly.dev, 9 Oct 2026
- Intended users
- The documentation describes Pkgly as a simple free artifact manager for common developers as well as larger companies. · docs.pkgly.dev, 9 Oct 2026
- Package ecosystems
- The feature overview lists support for Maven, npm, Python, Composer, Go modules, Cargo, RubyGems, Docker/OCI, Helm, Debian APT, and NuGet. · docs.pkgly.dev, 9 Oct 2026
- Product
- Pkgly is a free, open-source artifact manager for hosting and retrieving software packages. · docs.pkgly.dev, 9 Oct 2026
- Repository modes
- Pkgly supports hosted and proxy repositories for most listed ecosystems; Cargo and Helm are listed as hosted only. · docs.pkgly.dev, 9 Oct 2026
- Retention
- Per-repository package cleanup is disabled by default and applies to hosted and proxy repositories. · docs.pkgly.dev, 9 Oct 2026
- Single sign-on
- Pkgly can validate signed tokens from upstream providers and also supports OAuth2 login with Google or Microsoft Entra ID. · docs.pkgly.dev, 9 Oct 2026
- Storage
- The product site describes S3 storage with local disk caching; the feature overview lists a configurable on-disk LRU cache. · pkgly.dev, 9 Oct 2026
- Webhooks
- Admin-managed package webhooks support package.published and package.deleted events with a durable retry queue. · docs.pkgly.dev, 9 Oct 2026
Where Pkgly stands on Freedom251
- Artifact repository software#29 of 64