Artifact Depot

What it does

API

The REST API includes repository, artifact, user, role, blob-store, settings, task, backup, and restore operations, plus a Nexus-compatible API subset.checked 11 Oct 2026

Audience

The documentation describes use in datacenters, CI pipelines, dev containers, offices, air-gapped clusters, and on developers’ laptops.checked 11 Oct 2026

Authentication and access

It supports JWT bearer tokens, HTTP Basic authentication, Argon2id password hashing, repository-scoped RBAC, and feature-gated LDAP with group-to-role mapping.checked 11 Oct 2026

Blob storage

Artifact content is BLAKE3-addressed and deduplicated, with filesystem or S3-compatible blob storage options.checked 11 Oct 2026

Deployment

It ships as a statically linked server binary or a rootless Docker image with an embedded web UI.checked 11 Oct 2026

Formats

It supports Raw, Docker/OCI, APT, Yum/DNF, PyPI, npm, Cargo, Helm, and Go modules; each format supports hosted, cache, and proxy repositories.checked 11 Oct 2026

Integrations

The documentation names compatible observability destinations including Jaeger, Honeycomb, Datadog, SigNoz, AWS X-Ray, Azure Monitor, and Splunk via an OTel collector.checked 11 Oct 2026

Intended use

The maker describes use in datacenters, CI pipelines, dev containers, Kubernetes clusters, air-gapped environments, and developer laptops.checked 11 Oct 2026

LDAP

LDAP authentication with group-to-role mapping is available behind a feature flag.checked 11 Oct 2026

License

The linked public GitHub repository identifies the project license as Apache-2.0.checked 11 Oct 2026

Metadata storage

Metadata can use embedded redb for a single node or DynamoDB-compatible storage for clustered deployments.checked 11 Oct 2026

Notable setup requirement

A fresh instance does not automatically create a blob store, so an operator or initialization script must create one before repositories can accept writes.checked 11 Oct 2026

Observability

Depot exports traces and logs through OpenTelemetry and exposes Prometheus-format metrics at `/metrics`.checked 11 Oct 2026

Observability integrations

It exposes Prometheus metrics and exports telemetry through OpenTelemetry; the documentation describes Grafana dashboards and OTel collector integrations with services such as Datadog, Honeycomb, and Splunk.checked 11 Oct 2026

Operational limit

On a fresh instance, an operator must create at least one blob store before repositories can accept writes.checked 11 Oct 2026

Product

Artifact Depot is a Rust-based, scale-out artifact repository manager positioned as a replacement for Sonatype Nexus and JFrog Artifactory.checked 11 Oct 2026

Purpose

Artifact Depot is a safe-Rust, scale-out artifact repository manager intended as a replacement for Nexus and Artifactory or as an artifact cache.checked 11 Oct 2026

Repository snapshots

Repository cloning copies metadata while reusing shared blobs, so it does not duplicate artifact data.checked 11 Oct 2026

Scale

Multiple instances can share key-value and blob backends, with distributed leases for background jobs and live integrity checks.checked 11 Oct 2026

Scale-out

Multiple instances can share DynamoDB-compatible metadata and S3-compatible blob storage, with distributed leases for background jobs.checked 11 Oct 2026

Security

Authentication supports JWT bearer tokens and HTTP Basic; passwords are hashed with Argon2id, and repository-scoped RBAC is available.checked 11 Oct 2026

Storage

It deduplicates content-addressed blobs with BLAKE3 and supports embedded redb or DynamoDB-compatible key-value stores, plus filesystem or S3-compatible blob storage.checked 11 Oct 2026

Supported formats

It supports Raw, Docker/OCI, APT, Yum/DNF, PyPI, npm, Cargo, Helm, and Go modules, with hosted, cache, and proxy repository types.checked 11 Oct 2026