RepoForge

RepoForge is a private package registry designed for engineering teams that need to host and manage proprietary Python, Docker, NPM, Debian, and Conda packages. It addresses the need for secure, fast, and accessible private repositories, offering a solution that is positioned as faster than public registries like PyPI and more cost-effective than some alternatives. The platform is intended for teams shipping internal software who require granular access controls, reliable uptime, and integration with their existing development workflows.

The service provides several notable features. Python is a primary focus, with support for tools such as pip, poetry, uv, twine, and setuptools, and it includes automated vulnerability scanning for every Python package upon publishing. Advanced plans add active vulnerability monitoring, alerting users to new CVEs affecting packages already in the registry. RepoForge offers upstream mirroring for registries like PyPI and npm on Standard plans and above, allowing teams to access both private and public packages from a single registry URL with edge caching to improve install speeds. The platform enforces granular access control through scoped tokens, enabling fine-tuned permissions for users and CI pipelines, and supports SAML/OIDC single sign-on on higher-tier plans.

RepoForge integrates natively with CI/CD systems such as GitHub Actions, GitLab CI/CD, and Jenkins, allowing teams to publish and pull private packages directly from their pipelines with minimal configuration. Custom domain support is available on Advanced plans, enabling organizations to serve their registries from their own branded URLs with full HTTPS enforcement and no visible RepoForge branding. The service is delivered as a hosted solution, requiring no infrastructure management from the user. Setup is streamlined, with unique registry URLs issued immediately upon account creation, and compatibility is maintained with standard package management tools.

Pricing is structured per user, per month, with no bandwidth caps or per-seat surprises. There is a free tier for open source projects, as well as Basic, Standard, and Advanced paid plans that increase storage limits and add features such as upstream mirroring, edge caching, SSO authentication, active vulnerability monitoring, and custom domains. 9% uptime SLA with service credits on advanced accounts. The tool is positioned within the class of private package registries, supporting multiple package formats in a single platform.