JSR
JSR is a free package registry for JavaScript and TypeScript that distributes packages as web-standard ECMAScript modules.
What JSR is
JSR is a free package registry for JavaScript and TypeScript that distributes packages as web-standard ECMAScript modules. It accepts TypeScript source, generates documentation and declaration files, and transpiles code for compatibility across runtimes. JSR says packages work with Node.js, Deno, Bun, browsers, and more; developers can add them using Deno, pnpm, Yarn, npm, or Bun tooling. The registry creates documentation from source code and JSDoc comments, and package scores can be used to filter search results. Publishing from GitHub Actions can use OIDC without configured secrets or authentication, and can produce SLSA provenance statements recorded in the Sigstore Rekor transparency log. Other CI providers can publish with a personal access token, but that method does not generate provenance attestations. Published versions are immutable and generally cannot be changed or deleted. JSR is open source under the MIT License and is operated by the Deno company, which pays its hosting bills. Its listed plan costs nothing; quotas apply to scopes and package versions, and users can request increases by email. Private packages are not supported, and the package size limit is 20 MB.
Good
- Accepts TypeScript source and generates declarations.
- Packages target multiple runtimes and package managers.
- Automatically generates documentation from source and JSDoc.
- GitHub Actions publishing can create SLSA provenance statements.
Watch out
- Quotas apply to scopes and package versions.
- Published versions are generally immutable.
- Private packages are not supported.
- Package size is limited to 20 MB.
Who it suits
JSR suits JavaScript and TypeScript developers who want packages distributed as ECMAScript modules across multiple runtimes. It is also relevant to teams that publish packages through GitHub Actions or other CI providers.
Verdict
JSR combines TypeScript support, generated documentation, and publishing options for a range of runtimes. Its quotas, immutable versions, lack of private packages, and 20 MB package limit are worth checking before adopting it.
Plans and prices
From JSR's own pricing page, checked 7 Oct 2026.
| Plan | Price | What it gives you |
|---|---|---|
| Free | Free | Always free to use; quotas apply to scopes and package versions |
The facts
Each one read from JSR's own pages, with the date it was checked.
What it does
- Automatic documentation
- JSR automatically generates package documentation from source code and JSDoc comments.checked 7 Oct 2026
- ES modules
- JSR packages are distributed as web-standard ECMAScript modules.checked 7 Oct 2026
- GitHub Actions publishing
- JSR supports publishing from GitHub Actions using OIDC without configuring secrets or authentication.checked 7 Oct 2026
- Immutable versions
- Published package versions are immutable and generally cannot be changed or deleted.checked 7 Oct 2026
- Open source
- JSR is open source and licensed under the MIT License.checked 7 Oct 2026
- Operator and funding
- JSR is currently operated by the Deno company, which pays its hosting bills; JSR says it is designed to always be free to use.checked 7 Oct 2026
- Other CI publishing
- Publishing from other CI providers is supported with a personal access token, and token-based publishing does not generate provenance attestations.checked 7 Oct 2026
- Package managers
- JSR packages can be added with Deno, pnpm, Yarn, npm, or Bun tooling.checked 7 Oct 2026
- Package scoring
- JSR provides package scoring and supports filtering package search by score.checked 7 Oct 2026
- Provenance
- For packages published from GitHub Actions, JSR can create SLSA provenance statements stored in the Sigstore Rekor transparency log.checked 7 Oct 2026
- Runtime compatibility
- JSR says packages work with Node.js, Deno, Bun, browsers, and more.checked 7 Oct 2026
- TypeScript support
- JSR accepts TypeScript source and generates package documentation and declaration files, and transpiles code for cross-runtime compatibility.checked 7 Oct 2026
- Usage limits
- JSR applies quotas to scopes and package versions to prevent abuse and says users can request quota increases by email.checked 7 Oct 2026
- What it is
- JSR is a modern package registry for JavaScript and TypeScript.checked 7 Oct 2026
Alternatives to JSR
- 1
PyPI
Free planOpen sourceWebAPILinuxmacOS8.1Free plan - 2
Bioconductor
Free planOpen sourceWebLinuxmacOSSelf-hosted7.6Free plan - 3
npm
Free planLinuxmacOSWindows7.5From $7 a month - 4
Inedo ProGet
Free planWebAPILinuxSelf-hosted7.4From $2,395 a year - 5
GNU ELPA
Free planOpen sourceWebSelf-hosted7.0Free plan - 6
LuaRocks
Free planAPILinuxmacOSSelf-hosted6.9Free plan