
Verdaccio
Verdaccio is a free, open-source Node.js private proxy registry for teams that want to use private npm packages without sending code to the public.
What Verdaccio is
Verdaccio is a free, open-source Node.js private proxy registry for teams that want to use private npm packages without sending code to the public. It can proxy registries such as npmjs.org, cache downloaded modules, and chain multiple registries behind one endpoint. Teams can also publish a locally modified third-party package under the same name. Verdaccio supports npm, yarn, and pnpm clients, and can be run in a self-hosted environment. Its default storage uses the local file system and a small built-in database for private packages. Built-in htpasswd authentication and package access rules control access, publishing, and unpublishing. JWT tokens can be configured to expire, though the documentation says legacy tokens are not designed to expire. An official Docker image and Kubernetes Helm support are available. Plugins can extend authentication, middleware, storage, UI themes, and filtering. Installation requires Node.js, a package manager, and a modern browser; version 6.x requires Node.js 22 or later, while 7.x requires Node.js 24 or later.
Good
- Free and open source
- Caches modules from proxied registries
- Supports npm, yarn, and pnpm
- Offers Docker and Kubernetes Helm deployment support
Watch out
- Version 6.x requires Node.js 22 or later
- Version 7.x requires Node.js 24 or later
- Legacy tokens are not designed to expire
Who it suits
Verdaccio suits development teams that need private npm packages, registry proxying, or a self-hosted package endpoint. It requires Node.js, a package manager, and a modern browser.
Verdict
Verdaccio provides private package storage, registry proxying, and access controls without a listed price. Teams should account for its Node.js requirements and the token behavior described in its documentation.
Plans and prices
From Verdaccio's own pricing page, checked 4 Oct 2026.
| Plan | Price | What it gives you |
|---|---|---|
| Verdaccio | Free | No paid plans or price stated on the opened official pages |
The facts
Each one read from Verdaccio's own pages, with the date it was checked.
What it does
- Authentication and access
- Built-in htpasswd authentication is the default, and package access rules can control access, publishing and unpublishing.checked 4 Oct 2026
- Clients
- The site says popular npm clients are supported, including npm, yarn and pnpm.checked 4 Oct 2026
- Community support
- The site links to a community Discord server.checked 4 Oct 2026
- Deployment
- Verdaccio provides an official Docker image and Kubernetes Helm support.checked 4 Oct 2026
- Extensions
- Verdaccio supports authentication, middleware, storage, UI theme and filter plugins.checked 4 Oct 2026
- Package override
- Users can publish a modified version of a third-party package locally under the same name.checked 4 Oct 2026
- Private packages
- It lets organizations use private npm packages without sending their code to the public.checked 4 Oct 2026
- Product
- Verdaccio is a lightweight Node.js private proxy registry.checked 4 Oct 2026
- Proxy and cache
- It can proxy other registries such as npmjs.org and cache downloaded modules.checked 4 Oct 2026
- Registry chaining
- It can chain multiple registries so projects fetch packages from one endpoint.checked 4 Oct 2026
- Requirements
- The installation page lists Node.js, a package manager and a modern browser as prerequisites; Verdaccio 6.x requires Node.js 22 or later and 7.x requires Node.js 24 or later.checked 4 Oct 2026
- Storage
- By default, Verdaccio uses the local file system and a small built-in database for private packages.checked 4 Oct 2026
- Token security
- JWT tokens can be configured with expiration; the documentation says legacy tokens are not designed to expire.checked 4 Oct 2026
Alternatives to Verdaccio
- 1

Azure Test Plans
Free planWebAPIExtensionLinux8.1From $6 a month - 2

Nexspence
Free planOpen sourceWebAPILinuxmacOS8.1From $25 a month - 3
Oracle WebCenter Content
AndroidiOSWebAPI7.7$3,450 one-time - 4

Packagecloud
Free planWebAPILinuxmacOS7.7From $89 a month - 5

Sonatype Nexus Repository
Free planWebAPILinuxmacOS7.5From $1,950 a year - 6

Inedo ProGet
Free planWebAPILinuxSelf-hosted7.4From $2,395 a year
