Self-host artifact-keeper

Artifact Keeper is an enterprise-grade, open-source artifact registry built to replace JFrog Artifactory and Sonatype Nexus. It manages more than 45 package types — Maven, npm, PyPI, Docker, Cargo, Go, Helm, NuGet, RubyGems, plus system packages like RPM, Debian, Alpine — each speaking its package manager's native protocol. Automatic vulnerability scanning uses Trivy and Grype, with policies that can quarantine or block problematic artifacts. A WebAssembly plugin system enables custom format handlers. Peer-to-peer replication distributes artifacts across geographic regions. Full-text search runs on OpenSearch. A built-in migration tool imports repositories, artifacts, and permissions from Artifactory. Users can sign in via JSON Web Tokens, OpenID Connect, LDAP, SAML 2.0, or API tokens, all backed by role-based access control. The Rust backend requires PostgreSQL 16 and OpenSearch. Deploy via Docker Compose or a Helm chart for Kubernetes with autoscaling. Native mobile applications for macOS, iOS, and Android are in development. Every feature ships in the MIT-licensed release with no open-core model or paid edition.