Best Nonprofit Repository Management Software

GitLab is a complete DevOps platform. With GitLab, you get a complete CI/CD toolchain out-of-the-box. One interface. One conversation. One permission model. GitLab is a complete DevOps platform, delivered as a single application, fundamentally changing the way Development, Security, and Ops teams collaborate. GitLab helps teams accelerate software delivery from weeks to minutes, reduce development costs, and reduce the risk of application vulnerabilities while increasing developer productivity. Source code management enables coordination, sharing and collaboration across the entire software development team. Track and merge branches, audit changes and enable concurrent work, to accelerate software delivery. Review code, discuss changes, share knowledge, and identify defects in code among distributed teams via asynchronous review and commenting. Automate, track and report code reviews.

Git is a free and open source distributed version control system designed to handle everything from small to very large projects with speed and efficiency. Git is easy to learn and has a tiny footprint with lightning fast performance. It outclasses SCM tools like Subversion, CVS, Perforce, and ClearCase with features like cheap local branching, convenient staging areas, and multiple workflows. You can query/set/replace/unset options with this command. The name is actually the section and the key separated by a dot, and the value will be escaped.

The Industry Standard Universal Binary Repository Manager. Supports all major package types (over 27 and growing) such as Maven, npm, Python, NuGet, Gradle, Go, and Helm including Kubernetes and Docker as well as integration with leading CI servers and DevOps tools that you already use. Additional functionalities include: - High Availability that scales to infinity with active/active clustering of your DevOps environment and scales as business grows - On-Prem, Cloud, Hybrid, or Multi-Cloud Solution - De Facto Kubernetes Registry managing application packages, operating system’s component dependencies, open source libraries, Docker containers, and Helm charts with full visibility of all dependencies. Compatible with a growing list of Kubernetes cluster providers.

Chocolatey has the largest online registry of Windows packages. Chocolatey packages encapsulate everything required to manage a particular piece of software into one deployment artifact by wrapping installers, executables, zips, and/or scripts into a compiled package file. Package submissions go through a rigorous moderation review process, including automatic virus scanning. The community repository has a strict policy on malicious and pirated software. Many organizations face the ongoing challenge of deploying and supporting various versions of software. Chocolatey allows organizations to automate and simplify the management of their complex Windows environments. Our customers have experienced a massive reduction in effort, improved speed of deployment, high reliability, and comprehensive reporting. Reduce complexity, save yourself time, and get up to speed on the latest technologies and approaches.

Codeberg is a collaboration platform and git hosting for free and open source software, content and projects. Independent and powered by your donations and contributions - consider joining the non-profit association Codeberg e. V. to further support our mission and receive your vote! All services run on servers under our control, no dependencies on external services and no third party cookies, no tracking. While all successful software tools that enabled this development were contributed by the Free and Open Source Software community, commercial for-profit platforms dominate the hosting of the results of our collaborative work. This has led to the paradox that literally millions of volunteers create, collect, and maintain invaluable knowledge, documentation, and software, to feed closed platforms driven by commercial interests, whose program is neither visible nor controllable from outside.

Cloudsmith is a Software-as-a-Service (SaaS) platform that acts as the single source of truth for software everywhere. We help organisations reliably manage the dependencies, deployment and distribution of their software stack in one centralised place, ensuring their software supply chain remains secure. We are here to empower teams to deliver software faster, without restrictions of managing different asset types, while remaining scalable and cost-efficient. From source to delivery — with complete trust, control, and security.

Sonatype Nexus Repository is a powerful binary repository manager designed to streamline the management of open-source and third-party components in your software development lifecycle. The Community Edition, available for free, supports essential features such as integration with popular CI/CD tools, enhanced security for managing components, and support for up to 200,000 requests per day. As your needs scale, Nexus Repository Pro offers additional features like unlimited components, high availability, disaster recovery, and advanced security controls, making it a comprehensive solution for businesses of all sizes.

Your code repository software is where you store your source code. This might be a Mercurial, Git, or SVN repository. Perforce TeamHub can host your source code repository, whether it’s Mercurial, Git, or SVN. You can add multiple repositories in one project — or create a separate project for each repository. Perforce TeamHub can host more than your code repositories. You can manage and maintain all of your software assets in one spot. This includes build artifacts (Maven, Ivy) and Docker container registries. It also includes private file sharing through WebDAV repositories for your other binary files. You can use Perforce TeamHub on its own or alongside P4 to maintain a single source of truth across development teams. For example, you can keep large binary files in P4, then combine those files with Git assets from Perforce TeamHub in a hybrid workspace to achieve high build performance.

Scan for vulnerabilities and control who can access different feeds and actions, all within minutes of download and fast install. ProGet is self-managed and is available in a powerful free version that can be upgraded as needed. ProGet helps you package applications and components so you can ensure your software is built only once, and then deployed consistently across environments. This means everyone can be certain that what goes to production is exactly what was built and tested. Third-party packages (such as NuGet, npm, PowerShell, and Chocolatey) and Docker containers are also supported, allowing you to enforce quality standards, monitor for open-source licenses, and scan for vulnerabilities across all packages, much earlier in the development cycle. With high availability, load-balancing, and multi-site replication, ProGet can centralize your organization’s software applications and components to provide uniform access to developers and servers.

Your setups are immune to corrupted Windows Installer stacks on target systems (which would cause your setups to fail through no fault of your own), and best of all, you get to switch between native code and Windows Installer setup engines at runtime, as often as you need! When you use the native code setup engine, InstantInstall Acceleration delivers setups that install an order of magnitude faster compared to all other Windows installers. InstallAware Developer is a powerful software installation solution for Windows Installer that enables MSIcode scripting for rapid setup development without the high cost and steep learning curve of other setup solutions. InstallAware effortlessly bridges Win32, Win64, and .NET apps to the Windows Store, creating a Universal Windows app from a customizable template and helping your end-users download your apps directly from the Windows Store.

Gemfury is a hosted repository for your public and private packages, where they are safe and within reach. Install them to any machine in minutes without worrying about running and securing your own repository server. Gemfury works with RubyGems, Python packages, npm modules, and all compatible frameworks and services. Authenticated Repo-URL keeps your private packages safe and secure during deployment. All management and deployment is done over SSL. Do everything you need with just a few terminal commands. We are hackers and love the command line; this one is our favorite. Gemfury is designed for teams. Share your account with coworkers and let them easily access your packages. Gemfury works with RubyGems, Python packages, npm modules, and all compatible frameworks and services. Install and use your code anywhere. Seamless integration and secure installation. Collaborate with your team.

Rails Assets is the frictionless proxy between Bundler and Bower. It automatically converts the packaged components into gems that are easily droppable into your asset pipeline and stay up to date. First, make sure you use bundler >= 1.8.4. Add Rails Assets as a new gem source, then reference any Bower components that you need as gems. In development, if you have issues with SSL certificates and security is not a priority, you can use the alternate endpoint instead. During bundle install, if Bundler requests a package like this, Rails Assets’ daemon automatically will fetch the component from Bower’s registry, analyze its manifest file, bower.json, repackage the component as a valid Ruby gem and serve it to your application. Dependencies are handled the same way recursively. Gems created by Rails Assets work great with any Sprockets-based application. It works with Sinatra too!

We're npm, Inc., the company behind Node package manager, the npm Registry, and npm CLI. We offer those to the community for free, but our day job is building and selling useful tools for developers like you. Get started today for free, or step up to npm Pro to enjoy a premium JavaScript development experience, with features like private packages. Bring the best of open source to you, your team, and your company. Relied upon by more than 11 million developers worldwide, npm is committed to making JavaScript development elegant, productive, and safe. The free npm Registry has become the center of JavaScript code sharing, and with more than one million packages, the largest software registry in the world. Our other tools and services take the Registry, and the work you do around it, to the next level. At npm, Inc., we're proud to dedicate teams of full-time employees to operating the npm Registry, enhancing the CLI, improving JavaScript security, and other projects.

With GitHub Packages, you can safely publish and consume packages within your organization or with the entire world. Use industry and community-standard package managers with native tooling commands. Then authenticate and publish directly to GitHub. Understand and safely install package contents. Get packages directly from the community on GitHub, and use only what’s been approved for your organization. Store your packages in the same secure environment as your source code, all protected by your GitHub credentials. With a full API and webhooks support, you can extend your workflows to work with GitHub Packages. GitHub Packages is built with the latest edge caching via a global CDN to deliver great performance, no matter where your builds run. Use Actions to automatically publish new package versions to GitHub Packages. Run your CI/CD with Actions, and install packages and images hosted on GitHub Packages or your preferred registry of record.

Yarn is a package manager which doubles down as project manager. Whether you work on one-shot projects or large monorepos, as a hobbyist or an enterprise user, we've got you covered. Split your project into sub-components kept within a single repository. Yarn guarantees that an install that works now will continue to work the same way in the future. Yarn cannot solve all your problems, but it can be the foundation for others to do it. We believe in challenging the status quo. What should the ideal developer experience be like? Yarn is an independent open-source project tied to no company. Your support makes us thrive. Yarn already knows everything there is to know about your dependency tree, it even installs it on the disk for you. So, why is it up to Node to find where your packages are? Instead, it should be the package manager's job to inform the interpreter about the location of the packages on the disk and manage any dependencies between packages and even versions of packages.

P4 is an enterprise-grade version control system designed to manage the complexities of modern software development. It allows teams to store, track, and manage all digital assets—ranging from source code to 3D models—with unprecedented scalability. P4 is ideal for large, distributed teams working on large-scale projects, offering powerful collaboration tools, seamless integrations, and advanced branching capabilities. With strong support for both centralized and distributed workflows, P4 enhances productivity and efficiency, making it a top choice for software, game, and hardware development teams.

The Secure Universal Package Manager. Continuously govern and audit all packages in your DevOps lifecycle. Thousands of teams worldwide trust MyGet with their package management and governance. Accelerate your software team with cloud package management, robust security controls and easy continuous integration build services. MyGet is a Universal Package Manager that integrates with your existing source code ecosystem and enables end-to-end package management. Centralized package management delivers consistency and governance to your DevOps workflow. MyGet real-time software license detection tracks your teams’ package usage and detects dependencies across all of your packages. Customized usage policies ensure your teams are only using approved packages while reporting vulnerabilities and outdated packages early in your software build and release cycles.

Web sites are made of lots of things, frameworks, libraries, assets, and utilities. Bower manages all these things for you. Keeping track of all these packages and making sure they are up to date (or set to the specific versions you need) is tricky. Bower to the rescue! Bower can manage components that contain HTML, CSS, JavaScript, fonts, or even image files. Bower doesn’t concatenate or minify code or do anything else, it just installs the right versions of the packages you need and their dependencies. To get started, Bower works by fetching and installing packages from all over, taking care of hunting, finding, downloading, and saving the stuff you’re looking for. Bower keeps track of these packages in a manifest file, bower.json. How you use packages is up to you. Bower provides hooks to facilitate using packages in your tools and workflows. Bower is optimized for the front-end. If multiple packages depend on a package, jQuery, for example, Bower will download jQuery just once.

Add fully integrated package management to your continuous integration/continuous delivery (CI/CD) pipelines with a single click. Create and share Maven, npm, NuGet, and Python package feeds from public and private sources with teams of any size. Create and share Maven, npm, NuGet, and Python package feeds from public and private sources. Easily share code across small teams and large enterprises. Get universal artifact management for Maven, npm, NuGet, and Python. Share packages, and use built-in CI/CD, versioning, and testing. Share code effortlessly by storing Maven, npm, NuGet, and Python packages together. And there's no need to store binaries in Git, simply store them using Universal Packages. Keep every public source package you use, including packages from npmjs and nuget.org, safe in your feed where only you can delete it, and where it's backed by the enterprise-grade Azure SLA.

RepoFlow makes package management effortless and efficient. Designed to simplify your development workflow, RepoFlow provides a seamless experience for managing, discovering, and utilizing your software packages. Whether you’re a solo developer or part of a large team, RepoFlow has the tools you need to work smarter and faster. Why RepoFlow? • Simple and Intuitive RepoFlow is designed with developers in mind, offering a clean, straightforward interface. Quickly find the packages you need, view their details, and access ReadMe files without jumping through hoops. • Lightning-Fast Search Handle thousands of packages effortlessly with a powerful search that surfaces the exact package you're looking for, with the ability to filter by repository, version, or other metadata. • Rich Package Insights View ReadMe files, setup instructions, and other package details in just a few clicks. RepoFlow ensures all relevant information is easily accessible, saving you time.