Welcome to Artifact Keeper

Artifact Keeper is an open-source artifact registry built to be a powerful, cost-effective alternative to JFrog Artifactory. Built with Rust and React, it provides enterprise-grade artifact management without the enterprise price tag.

Why Artifact Keeper?

• Free and Open Source: MIT licensed, no hidden costs or feature gates
• 45+ Package Formats: Native protocol support for Maven, npm, Docker, PyPI, NuGet, Cargo, Helm, and 38+ more
• Built for Scale: Efficient content-addressed storage with SHA-256 deduplication
• Modern Architecture: Rust backend for performance, React frontend for usability
• Security First: Dual vulnerability scanning with Trivy and Grype, policy engine, artifact signing
• Extensible: WASM plugin system for custom format handlers
• Peer Replication: Recursive peer mesh with P2P replication for global teams
• Migration Tooling: Built-in migration from Artifactory

Key Features

• Multi-Format Support: Single registry for all your package types — languages, containers, cloud infrastructure, ML models, and system packages
• Security Scanning: Automatic vulnerability detection with Trivy and Grype, A-F scoring, quarantine policies
• Advanced Search: Fast, full-text search powered by Meilisearch
• Multi-Auth: JWT, OIDC, LDAP, SAML 2.0, and API tokens with fine-grained RBAC
• Peer Replication: Deploy full peers closer to your teams with Borg Replication
• WASM Plugins: Extend with custom format handlers written in any WASM-compatible language
• Artifact Signing: GPG and RSA signing for Debian, RPM, Alpine, and Conda packages
• Migration API: Seamless migration from Artifactory with zero downtime
• Modern UI: Clean, intuitive interface built with React 19 and Ant Design 6

Quick Links

• Architecture - How the system is built and why
• Quickstart Guide - Get up and running in 5 minutes
• Package Formats - See all 45+ supported formats
• Migrate from Artifactory - Switch and save thousands per year
• Configuration Reference - Complete environment variable guide

License

Artifact Keeper is released under the MIT License. Use it freely in your projects, commercial or otherwise.

Technology Stack

• Backend: Rust 1.75+ with Axum, SQLx, and Tokio
• Frontend: React 19 with TypeScript 5.3, Ant Design 6, and TanStack Query 5
• Database: PostgreSQL 16 with compile-time checked queries
• Storage: Filesystem or S3 for artifacts (content-addressed by SHA-256)
• Optional: Trivy + Grype for scanning, Meilisearch for search, MinIO for S3-compatible storage