Securing open-source package ecosystems by originating, validating, and augmenting build attestations.
Cost / License
- Free
- Open Source (Apache-2.0)
Platforms
- Go (Programming Language)
- Linux
- Mac
- Windows
- BSD
United States

Apps similar to CloudRepo include OSS Rebuild, which is free and open source. Other options are Artifactory, RepoFlow, Pulp and Sonatype Nexus Repository OSS. You can choose from more than 10 Package Managers like CloudRepo for the web, Linux, Windows, Mac and self-hosting.
Securing open-source package ecosystems by originating, validating, and augmenting build attestations.

The world’s most advanced repository manager. Artifactory offers powerful enterprise features and fine-grained permission control behind a sleek and easy-to-use UI. Artifactory acts as a proxy between your build tool (Maven, Ant, Ivy, Gradle etc.) and the outside world.
Handle thousands of packages with lightning-fast performance and reliable uptime. Flexible plans start free, with no credit card required.

Pulp is a platform for managing repositories of software packages and making it available to a large numbers of consumers. Pulp can locally mirror all or part of a repository, host your own software packages in repositories, and manage many types of content from multiple sources...
The world's only repository manager with FREE support for popular formats.




AWS CodeArtifact is a fully managed artifact repository service that aims to make it easy for organizations of any size to securely store, publish, and share software packages used in their software development process.

Create, host, and share packages with your team, and add artifacts to your CI/CD pipelines with a single click.


Maventum is a modern search and analysis platform for exploring all Java/Maven artifacts in one place.
Sonatype provides the most widely used tools in Java development, including: Maven, Nexus, Hudson, m2eclipse, and Maven Central.
is a hosted package repository service. It allows users to host npm, Java/Maven, python, apt, yum and rubygem repositories without any pre-configuration.


Cloudsmith is your friendly neighbourhood package management SaaS (fully managed), packed with Enterprise-grade features to manage and accelerate secure delivery of your software.




Consistency, continuity, compliance – all in one centralized universal package manager with ProGet. ProGet servers as the organization central repository, allowing the enterprise to store all your important asset in one place.