{"id":19944294,"url":"https://github.com/taskforcesh/nandu","last_synced_at":"2025-10-04T05:29:29.331Z","repository":{"id":45004436,"uuid":"426478227","full_name":"taskforcesh/nandu","owner":"taskforcesh","description":"NPM open registry","archived":false,"fork":false,"pushed_at":"2025-09-26T06:50:58.000Z","size":2812,"stargazers_count":68,"open_issues_count":4,"forks_count":2,"subscribers_count":2,"default_branch":"main","last_synced_at":"2025-09-26T08:37:16.378Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"agpl-3.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/taskforcesh.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE.md","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2021-11-10T04:00:20.000Z","updated_at":"2025-09-26T06:49:45.000Z","dependencies_parsed_at":"2025-05-23T10:51:14.542Z","dependency_job_id":"343c3647-f0e1-4039-b4e8-cde5b4aea541","html_url":"https://github.com/taskforcesh/nandu","commit_stats":null,"previous_names":[],"tags_count":32,"template":false,"template_full_name":null,"purl":"pkg:github/taskforcesh/nandu","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/taskforcesh%2Fnandu","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/taskforcesh%2Fnandu/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/taskforcesh%2Fnandu/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/taskforcesh%2Fnandu/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/taskforcesh","download_url":"https://codeload.github.com/taskforcesh/nandu/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/taskforcesh%2Fnandu/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":278267341,"owners_count":25958828,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-10-04T02:00:05.491Z","response_time":63,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-11-13T00:19:53.440Z","updated_at":"2025-10-04T05:29:29.325Z","avatar_url":"https://github.com/taskforcesh.png","language":"TypeScript","funding_links":[],"categories":[],"sub_categories":[],"readme":"![nandu](https://github.com/taskforcesh/nandu/blob/assets/nandu.png?raw=true)\n\n[![Version](https://img.shields.io/npm/v/nandu.svg)](https://npmjs.org/package/nandu)\n[![Downloads/week](https://img.shields.io/npm/dw/nandu.svg)](https://npmjs.org/package/nandu)\n[![License](https://img.shields.io/npm/l/nandu.svg)](https://github.com/taskforcesh/nandu/blob/main/package.json)\n\n## Introduction\n\nNandu is a new open source NPM registry compatible with Npm, Yarn and Pnpm.\n\nIt has been built from scratch with the following goals in mind:\n- Secured by default, so it can be used in a corporate environment with peace of mind.\n- Easy to deploy, so you can have your registry up and running in minutes.\n- Compatible with scalable technologies such as S3 and PostreSQL so you can scale your registry to meet your needs.\n- Implement most of the NPM registry API so you can use it with your existing tools.\n- Clean code base, serving as documentation for most NPM currently undocumented APIs.\n\n## Motivation\n\nNPM is the core of all the NodeJS Ecosystem, and even though all NPM clients are open source,\nthe server itself is proprietary software.\n\nThere have been a couple of attempts to provide an open source alternative (such as Sintopia and Verdaccio),\nbut these projects are oriented to support private local repositories instead a full NPM server\nreplacement within a professional environment.\n\nNandu is secured by default, focusing on user, team and organization management, enabling\ncorporate use cases where user access management is important as well as other popular\nuse cases such as providing subscription-based licenses for commercial packages.\n\nFurthermore, we are currently also aiming at documenting the NPM Apis, for which there is\ncurrently no documentation available.\n\n## Architecture\n\nThe registry is both a package metadata store, for which you can use any SQL-based database (including SQLlite),\nas well as a package store that is based on file storage. The package store can be anything capable of storing\nfiles but currently, we are shipping support for local files as well as S3, but it is quite easy to add other file\nstorage by implementing a simple interface if needed.\n\nAll settings are controlled by environment variables, so no configuration files are used which makes it easier\nto deploy following the [12-factor app principles](https://12factor.net/).\n\n## Used by\n\nCurrently used in production by [Taskforce.sh](https://taskforce.sh) to provide the BullMQ Pro package to licensed users.\n\n## Features\n\nNandu is capable of the basic set of features needed for publishing packages, handling authentication and\nauthorization, organizations and teams.\n\n- Secured by default, only registered users can access the registry.\n- Complete authorization tokens and passwords support including cidr whitelisting.\n- Use any SQL database (including SQLite) for storing persistent metadata.\n- Store packages in a disk base storage or S3.\n- publish\n- scoped packages\n- [hooks](https://docs.npmjs.com/cli/v7/commands/npm-hook)\n- [access](https://docs.npmjs.com/cli/v7/commands/npm-access)\n- [teams](https://docs.npmjs.com/cli/v8/commands/npm-team)\n- [organizations](https://docs.npmjs.com/cli/v8/commands/npm-org)\n\n## How to use\n\nNandu provides a simple CLI tool that is used to manage the registry. The CLI tool should\nbe installed globally:\n    \n```bash\n    yarn global add @nandu/cli\n```\n\nRun the cli tool to see the available commands:\n    \n```bash\n    $ nandu\n\n    Nandu Open NPM Registry CLI\n\nVERSION\n  @nandu/cli/1.0.2 darwin-x64 node-v16.15.1\n\nUSAGE\n  $ nandu [COMMAND]\n\nTOPICS\n  token  Manage NPM Registry tokens\n  user   Manage NPM Registry users\n\nCOMMANDS\n  help   display help for nandu\n  start  Starts Nandu Open NPM Server\n  token  Manage NPM Registry tokens\n  user   Manage NPM Registry users\n```\n\n### Starting the server\n\nIf you just want to start the server to try it out, go to a suitable directory (as the following command will create a SQLite database file) and run:\n\n```bash\n    nandu start\n```\n\nThis command will start a Nandu service using an SQLite database and local file storage. You will find the database and the storage\nunder the directory ```storage``` under the current directory.\n\nThe service will be by default available at http://localhost:4567\n\nIf you point your browser to http://localhost:4567 you will see the Nandu login page, however, you will\nnot be able to login as there are no users in the system yet. \nYou should start by creating a root user:\n\n```bash\n    nandu user:create --root --username root --password root\n```\n\nTo start the server, you need to provide the following environment variables:\n\n```bash\n    export NPM_REGISTRY_PORT=8080\n    export NPM_REGISTRY_HOST=\n```\n\n\n## License\n\nThis project is provided as open source and licensed under GNU's AGPL license terms.\n\n(c) 2022-2025 Taskforce.sh Inc.\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Ftaskforcesh%2Fnandu","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Ftaskforcesh%2Fnandu","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Ftaskforcesh%2Fnandu/lists"}