Connect a custom package source

A custom package source connects an external HTTPS repository to a private Ravenstash cache. The source can be public or require authentication.

Create the cache

1. Open Package caches in the Ravenstash app.
2. Select New custom cache.
3. Choose PyPI, npm, or Maven.
4. Enter the external repository URL.
5. Add source authentication when required.
6. Choose whether the cache can be used directly.
7. Create the cache.

The cache has its own private Ravenstash URL. You can use that URL directly with a package manager or connect the cache to a private repository.

Connect it to a private repository

1. Open the private repository.
2. Open Upstreams and select the matching ecosystem.
3. Add the custom cache.
4. Choose its order and package-age settings.
5. Save the change.

A PyPI cache can connect only to PyPI, an npm cache only to npm, and a Maven cache only to Maven.

Private external sources

Source authentication is stored separately from developer and automation credentials. Developers continue authenticating to Ravenstash; they do not receive the external repository credentials.

Update the authentication details from the cache settings when the source credentials change.

Note

Ravenstash retrieves packages as they are requested. A custom cache is a private, mirror-like package source, not an advance copy of the entire external repository.