Supported features and formats

Ravenstash is a hosted private registry for PyPI, npm, Maven, Container, and Helm OCI workflows.

Repositories and packages

Private, authenticated publishing and retrieval for every supported registry.
Any combination of PyPI, npm, Maven, Container, and Helm in one repository.
Personal and organization ownership with shared namespaces and administrator roles.
Package and version views for PyPI, npm, and Maven.
Repository paths, tags, digests, platforms, manifests, layers, and attachments for Container and Helm.
Package and version actions, repository deletion, and a seven-day recovery window.

Browser-backed rvs login with revocable device sessions.
Repository discovery, explicit package targets, temporary native-client authentication, package helpers, and local runtime management.
rvs workflows for pip, uv, Twine, npm-compatible clients, Maven, Gradle, Docker, Helm, and ORAS.

Private mirrors for PyPI, npmjs.org, Maven Central, and supported custom sources.
Security scanning for private packages and mirrored dependencies.
Minimum package age to reduce exposure to brand-new compromised releases.
Direct private-mirror targets or mirrors connected to private repositories.
Mirrored-package inspection, refresh, removal, findings, and usage visibility.

Container and Helm repositories do not proxy public OCI registries. Classic Helm index.yaml and ChartMuseum-style repositories are not supported.

Ravenstash-managed North America and European Union - GDPR Compliance storage, or a supported storage provider owned by your organization.
Authenticated delivery through more than 300 locations for package clients, CI, browser downloads, containers, and Helm charts.

Personal and organization automation tokens for CI and releases.
Usage views for members, storage, artifact reads, and informational package delivery bandwidth. Egress is unlimited.
Online checkout and paid-plan management in the Ravenstash dashboard.

For product or contract questions, contact [email protected].