Securing open-source package ecosystems by originating, validating, and augmenting build attestations.
Cost / License
- Free
- Open Source (Apache-2.0)
Platforms
- Go (Programming Language)
- Linux
- Mac
- Windows
- BSD

JFrog is described as 'Products seamlessly integrate with practically any development environment on Earth, from legacy code to the most recent containers and micro-services' and is a CI/CD system in the development category. There are six alternatives to JFrog for a variety of platforms, including SaaS, Web-based, BSD, Self-Hosted and Amazon Web Services apps. The best JFrog alternative is OSS Rebuild, which is both free and Open Source. Other great apps like JFrog are Azure Artifacts, AWS CodeArtifact, ReARM and JitPack.
Securing open-source package ecosystems by originating, validating, and augmenting build attestations.

Create, host, and share packages with your team, and add artifacts to your CI/CD pipelines with a single click.


AWS CodeArtifact is a fully managed artifact repository service that aims to make it easy for organizations of any size to securely store, publish, and share software packages used in their software development process.

ReARM is an abbreviation for "Reliza's Artifact and Release Management". It is a Release Governance Platform to manage lifecycle for product and component releases and organize release metadata, including SBOMs, xBOMs, other security artifacts, vulnerability...


JitPack makes it easy to release your Java or Android library. Publish straight from GitHub or Bitbucket.
European artifact repository SaaS for secure software supply chains, with package repositories, SBOMs, vulnerability visibility, access control, and CRA-relevant workflows.



