compare
Reposilite vs Verdaccio
The same facts for both, read from GitHub every night, and the relation a person reviewed.
| Fact | Reposilite | Verdaccio |
|---|---|---|
| Language | Kotlin | TypeScript |
| Licence | Apache-2.0 | MIT |
| Stars | 1.9k | 18k |
| Latest | 3.6.3 | v6.10.5 |
| Last push | 2026-10-01 | 2026-10-05 |
| Release cadence | about 9 days between releases | too few releases |
| Active contributors | 4 commit authors on the default branch in the last 90 days | 9 commit authors on the default branch in the last 90 days |
| Flags | none | none |
How they relate
Both replace JFrog Artifactory. Alternatives to JFrog Artifactory →
PartialReposiliteHosts and proxies Maven repositories only.
PartialVerdaccioA private npm registry that proxies the public one, for npm packages only.
Reposilite
Verdaccio
- v7.0.0-next-7.302026-10-03a307098: Migrate the 7.x release workflow to Changesets action v2 and CLI v3.pre-release
- v6.10.52026-10-032ccbacf: Migrate the 6.x release workflow to Changesets action v2 and CLI v3.
- v7.0.0-next-7.292026-09-27908ccbb: Update verdaccio dependencies (@verdaccio/, verdaccio, verdaccio-) to the next-9 npm dist-tag.pre-release
- v7.0.0-next-7.282026-09-266fd3e8a: Make /-/v1/search work for storage plugins that still use the callback API.pre-release
- v6.10.42026-09-207730e60: Update express to 4.22.3 — directly and through @verdaccio/middleware 8.1.4,
Reposilite
unsigned The latest release, 3.6.3, carries no signature GitHub could verify.
Loading the security report
Verdaccio
✓ signed The latest release, v6.10.5, carries a signature GitHub verified.
Loading the security report