Self-host pricore
v0.58.4Host your own Composer package registry
- Stars
- 158
- CPU
- 1 core
- RAM
- 1 GB
- Storage
- 10 GB
- Ports
- 8000 (Main web application (FrankenPHP)), 8080 (Reverb WebSocket server for real-time updates)
- Requires
- Database (SQLite, MySQL 8.0+, or PostgreSQL 14+), Redis
ghcr.io/pricorephp/pricore
What is pricore?
A self-hosted Composer registry giving PHP teams complete ownership of their private package ecosystem. A web dashboard handles package browsing, token management, and download metrics. Packages sync automatically from major Git providers through webhooks, with monorepo support and Packagist mirroring. The native Composer v2 API ensures quick dependency resolution, while security auditing taps Packagist advisories with built-in composer audit integration. The stack runs on Laravel with FrankenPHP for speed, uses Redis for queues and caching, and works with SQLite, MySQL, or PostgreSQL. Deploy via Docker Compose or manually with PHP 8.4+, Node.js 22+, and a web server. Licensed under Apache 2.0 with a managed cloud alternative available.
Should you self-host pricore?
pricore scores 48/100 on selfhost.directory (how scoring works) and ranks #7 of 11 in Package Management. It has 158 GitHub stars.
It shipped 20 stable releases in the past year. The latest, v0.58.4, came out on 21 October 2026. New versions land roughly every 2 days.
Setup is moderate: expect some configuration beyond a single command. An official Docker image is available. It is Apache-2.0-licensed and written mostly in PHP.
Its closest alternative on selfhost.directory is verdaccio (75/100, 17 954 stars). It scores higher overall, so compare the two before you pick. See pricore vs verdaccio side by side.
Features
- Automatic Package Discovery
- Composer v2 API
- Git-Based Mirroring
- Monorepo Support
- Organization Management
- Private Composer registry
- Real-time updatesOptional - works without Reverb configured
- Registry Mirrors
- Security Auditing
- Token-based authentication
- Two-factor authentication
- Web Dashboard
pricore README
More in Package Management
pypiserverOpen-source, self-hosted PyPI-compatible index server: it serves Python packages from plain folders so pip and twine can install and upload them on your own network.
Sonatype NexusSelf-hosted, open-source binary artifact repository manager for Maven, npm, Docker, PyPI and more, with proxy caching, RBAC and REST APIs.
tuxmateSelf-hosted, open-source Linux setup helper: pick 180+ apps once, get inspectable install commands or scripts for apt, pacman, dnf, zypper, Nix, Flatpak, Snap, Homebrew.
unpubA self-hosted, open-source private Dart package registry for enterprises, featuring a web UI, MongoDB storage, and pub.dev proxying.
verdaccioSelf-hosted, open-source private npm registry in Node.js — proxies and caches npmjs.org, needs no database, and includes a web UI. Installs via npm, Docker or Helm.
Apt-Cacher NGapt-cacher-ng is a self-hosted, open-source caching proxy that shares downloaded packages across a local network, supporting Debian, Ubuntu, Arch, and openSUSE.
artifact-keeperSelf-hosted artifact registry with 45+ formats, security scanning, peer replication, Artifactory migration. MIT licensed, no feature gates or per-user fees.
AttuneAttune is a self-hosted, open-source tool for publishing APT repositories with local GPG signing, incremental index rebuilds, and S3-compatible storage.
F-DroidF-Droid Server is a suite of tools for maintaining an F-Droid repository system, allowing users to publish and manage collections of Android apps (APK files) and other packages.
GitnessAn open-source, self-hosted DevOps platform combining Git code hosting, CI/CD pipelines, Gitspaces dev environments and artifact registries in one Docker container.
harnessSelf-hosted, open-source DevOps platform: Git hosting with pull requests, CI/CD pipelines, Gitspaces dev environments, and Docker and Helm artifact registries.
MirrorProxyMirrorProxy is a self-hosted, open-source mirror acceleration gateway for GitHub, Docker/OCI, language packages, and Linux/BSD repos with access control and quotas.
0 comments