Verdaccio
Verdaccio is a simple, local private NPM registry that requires zero configuration to get started.
Our verdict
Who it's for
A lightweight, zero-config private NPM registry and proxy for Node.js packages.
Who should look elsewhere
The default tiny database is a JSON file, which might not scale for very large installations without custom storage plugins.
Pros
- +Easy to set up with zero configuration required.
- +Enhances security by keeping private packages local.
- +Improves performance with module caching and reduced latency.
- +Flexible storage options through plugins.
- +Seamless integration with existing development tools and DevOps practices.
Cons
- −The default tiny database is a JSON file, which might not scale for very large installations without custom storage plugins.
- −Legacy token signatures do not expire, requiring a switch to JWT for expiration functionality.
- −Manual intervention might be needed for secret token upgrades in older installations.
Key features
- ✓Zero-config local private NPM registry
- ✓Built-in tiny database for private packages
- ✓Proxying of public registries (e.g., npmjs.org)
- ✓Caching of downloaded modules
- ✓Support for npm, yarn, and pnpm clients
- ✓Official Docker image and Kubernetes Helm support
- ✓Extensible storage via community plugins (e.g., S3, Google Cloud Storage)
- ✓Ability to link multiple registries
Pricing
| Plan | Price | Billing | Notes |
|---|---|---|---|
| Verdaccio | — | month | Simple, zero-config-required local private NPM registry; Own tiny database; Proxy other registries (e.g., npmjs.org) |