Verdaccio

Verdaccio is a lightweight private registry for Node.js packages. It lets you publish private packages and cache public ones on your own server.

Verdaccio sits between your package manager and the public npm registry. Private packages are published to your registry and served from your own storage. Public packages are fetched once and kept in a cache, so later installs are faster and still work when the public registry is slow. It works with npm, pnpm and yarn, and it includes a web interface for browsing packages.

• Publish and serve private packages
• Cache public packages from npmjs.org
• Works with npm, pnpm and yarn
• Web interface included
• No database required

Node.js teams that want to keep internal packages off the public registry. It also suits developers who want faster installs on a local network and CI runners that need a reliable cache.

Verdaccio is open source under the MIT licence and is free to use. It runs on your own infrastructure, so you manage its storage, access rules and updates. Give it a clear authentication setup before you open it to the team, and back up the storage that holds your private packages.