Cargoman

Cargoman is a modern, high-performance private package registry built specifically for PHP developers and software agencies. Designed as a seamless alternative to Satis and Private Packagist, it eliminates the friction of manual JSON configuration, slow build times, and complex authentication.

Whether you are distributing proprietary code to clients or sharing internal packages across microservices, Cargoman provides a unified "Single-URL" architecture. This means your developers and clients authenticate via their global auth.json file—keeping your composer.json clean and free of customer-specific URLs.

Written from the ground up in Rust for maximum memory safety and speed, Cargoman is available as a fully managed Cloud platform or a true air-gapped, Self-Hosted binary that deploys in under 3 minutes via Docker.

Key Highlights:

Plug-and-Play Git Sync: Connect via Personal Access Token (PAT) or GitHub App to automatically discover your repositories and sync releases on every git push.

Single-URL Architecture: One clean registry endpoint for your entire team or client base.

Advanced Analytics: See exactly who is downloading your code, track usage over time, and identify abandoned projects.

Token Leak & Piracy Detection (Pro/Enterprise): Automatically detect if a client's access token is being shared or leaked, protecting your intellectual property.

Flexible Deployment: Choose the zero-maintenance Cloud SaaS, or self-host the lightweight Rust binary on your own infrastructure with an embedded React admin UI.