compare
Artipie vs Verdaccio
The same facts for both, read from GitHub every night, and the relation a person reviewed.
| Fact | Artipie | Verdaccio |
|---|---|---|
| Language | Java | TypeScript |
| Licence | MIT | MIT |
| Stars | 692 | 18k |
| Latest | v1.17.16 | v6.10.5 |
| Last push | 2026-08-26 | 2026-10-05 |
| Release cadence | about 6 days between releases | too few releases |
| Active contributors | 0 commit authors on the default branch in the last 90 days | 9 commit authors on the default branch in the last 90 days |
| Flags | none | none |
How they relate
Both replace JFrog Artifactory. Alternatives to JFrog Artifactory →
Full replacementArtipieHosts and proxies Maven, npm, PyPI, Docker, Helm, Debian, RPM and other repositories from one server.
PartialVerdaccioA private npm registry that proxies the public one, for npm packages only.
Artipie
- v1.17.162024-04-26Release v1.17.16
- rpm-adapter_v1.10.13_82024-04-15Release rpm-adapter_v1.10.13_8
- v0.30.152024-04-04Release v0.30.15
- v1.17.152024-04-02Release v1.17.15
- v1.17.142024-04-01Release v1.17.14
Verdaccio
- v7.0.0-next-7.302026-10-03a307098: Migrate the 7.x release workflow to Changesets action v2 and CLI v3.pre-release
- v6.10.52026-10-032ccbacf: Migrate the 6.x release workflow to Changesets action v2 and CLI v3.
- v7.0.0-next-7.292026-09-27908ccbb: Update verdaccio dependencies (@verdaccio/, verdaccio, verdaccio-) to the next-9 npm dist-tag.pre-release
- v7.0.0-next-7.282026-09-266fd3e8a: Make /-/v1/search work for storage plugins that still use the callback API.pre-release
- v6.10.42026-09-207730e60: Update express to 4.22.3 — directly and through @verdaccio/middleware 8.1.4,
Artipie
unsigned The latest release, v1.17.16, carries no signature GitHub could verify.
Loading the security report
Verdaccio
✓ signed The latest release, v6.10.5, carries a signature GitHub verified.
Loading the security report