Securing open-source package ecosystems by originating, validating, and augmenting build attestations.
Cost / License
- Free
- Open Source (Apache-2.0)
Platforms
- Go (Programming Language)
- Linux
- Mac
- Windows
- BSD
United States

Apps similar to JFrog include OSS Rebuild, which is free and open source. Other options are Azure Artifacts, AWS CodeArtifact, ReARM and JitPack. In total there are six Package Managers like JFrog for the web, self-hosting, Mac, Windows and Linux.
Securing open-source package ecosystems by originating, validating, and augmenting build attestations.

Create, host, and share packages with your team, and add artifacts to your CI/CD pipelines with a single click.


AWS CodeArtifact is a fully managed artifact repository service that aims to make it easy for organizations of any size to securely store, publish, and share software packages used in their software development process.

ReARM is an abbreviation for "Reliza's Artifact and Release Management". It is a Release Governance Platform to manage lifecycle for product and component releases and organize release metadata, including SBOMs, xBOMs, other security artifacts, vulnerability...


JitPack makes it easy to release your Java or Android library. Publish straight from GitHub or Bitbucket.
European artifact repository SaaS for secure software supply chains, with package repositories, SBOMs, vulnerability visibility, access control, and CRA-relevant workflows.



