Craftifact icon
Craftifact icon

Craftifact

European artifact repository SaaS for secure software supply chains, with package repositories, SBOMs, vulnerability visibility, access control, and CRA-relevant workflows.

Explore container repositories with namespaces, tags, digests, and metadata. Craftifact shows platform information, image size, and upload history for full transparency.

Cost / License

  • Subscription
  • Proprietary

Application type

Platforms

  • Online
  • Software as a Service (SaaS)
Browse artifacts stored in a repository and inspect detailed metadata such as uploader, timestamps, download history, and repository path.
Generate scoped API tokens for Maven, Python, npm, go, and OCI registries. Tokens can have configurable expiration times and are ideal for CI/CD pipelines, build systems, and automated deployments.
+9
Create robot accounts with dedicated access tokens for CI/CD workflows, automated builds, and deployments with configurable permissions and token rotation.
Craftifact alternatives  
0likes
8alternatives
0articles

Features

Properties

  1.  Lightweight
  2.  Privacy focused

Features

  1.  Dark Mode
  2.  No Tracking
  3.  Ad-free
  4.  Vulnerability management
  5.  Package Manager
  6.  License Management
  7.  European data privacy
  8.  CI/CD

 Tags

Craftifact News & Activities

Highlights All activities

Recent activities

Craftifact information

Craftifact was added to AlternativeTo by SoluForgeDE on and this page was last updated .
No comments or reviews, maybe you want to be first?

Official Links

What is Craftifact?

Craftifact is a European artifact repository SaaS for teams that need reliable package repositories and better visibility across their software supply chain.

It provides a central place to store, version, and distribute build artifacts across development, CI/CD, and deployment workflows. Beyond repository hosting, Craftifact connects package repositories with SBOMs, vulnerability findings, access controls, and policy signals so teams can make artifact-related security and compliance work more visible and repeatable.

The platform is especially relevant for teams preparing for CRA-related software supply chain requirements, including workflows around artifacts, SBOMs, vulnerability handling, access control, and operational evidence. Craftifact does not try to replace a full enterprise governance stack; it focuses on the repository layer where many of these signals originate or need to be tied together.

Craftifact is developed and operated in Europe, with attention to data protection, operational simplicity, predictable usage, and reduced vendor lock-in for modern engineering teams.