Verdaccio

Verdaccio is a lightweight, open-source private proxy registry for Node.js packages, built with Node.js and designed as a self-hosted alternative to the public npm registry. Created by Juan Picado, it allows organizations to host their own npm packages privately while transparently proxying public packages from the upstream npm registry, providing caching, access control, and package management without external dependencies. Key features include: transparent proxy caching (when a requested package is not found locally, Verdaccio fetches it from the configured uplink and caches it for future requests), support for multiple uplinks (mixing packages from npm, yarn registry, and other Verdaccio instances), scoped package publishing and access control (@scope/package with publish/read permissions per user or group), authentication via htpasswd, JWT, LDAP, Active Directory, or OAuth (including custom auth plugins), package version unpublish and deprecation, npm and yarn CLI compatibility (configured via .npmrc or .yarnrc), plugin system for authentication, storage (local filesystem, AWS S3, Google Cloud Storage, Azure Blob), middleware, and filters, and a web-based UI for browsing packages. Verdaccio is used by major projects including Nx, pnpm, Angular CLI, Storybook, Vendure, and Aurelia. As of 2026, version 6.x has over 16,900 stars, licensed under MIT.