Working with registries

Bytesafe registries are very lightweight and besides being containers for your packages dependencies, each registry is also its own entity and adhere to its own set of rules, as defined by you.

Users can create multiple registries, each with their own set of upstreams (linked private or public registries), organizing the flow of packages between different teams and the outside world.

Registries can be renamed, easily cloned and customized according to a users needs.

In addition to direct registry actions, Upstreams and Plugins & Policies are additional core features on top of each registry that define the flow of packages and the rules and constraints.

Upstreams

Upstreams are linked registries that are used both as a destination and source for packages in your private registries.

Upstreams can be:

• Public npm registry (registry.npmjs.org)
• Maven Central Repository (repo1.maven.org/maven2/)
• NuGet Gallery (nuget.org)
• Python Package Index (pypi.org)
• Other Bytesafe registry
• Git repository
• URL to any npm, NuGet, Maven or Python compatible registry

Package versions can be downloaded (“pulled”) from an upstream to a registry (either manually or when running npm install). Packages can also be published (“pushed”) from a Bytesafe registry up to an upstream.

A registry without upstreams will not be able to fetch packages from any outside source and packages from the registry can not be pushed from the registry to any other source either.

Upstream configurations enable custom workflows and secure management of packages. Easily configure a proxy to be used in between your project and the public npm registry.

For more information on how to configure upstreams as well as examples of upstream configurations for different use-cases, see the documentation section on Upstreams.

Plugins & Policies

Plugins extend on Bytesafe’s core with added functionality, such as Vulnerability scanning or License Compliance.

Policies are rules that are executed before any registry action is applied. Example actions include Freeze that prevents any changes to the contents of a registry.

Plugins and policies are configured inside Bytesafe, in the Plugins tab for a registry. Bytesafe offers a number of built-in plugins and policies for use, but will also support custom and 3rd party integrations in the future.

For more information on Plugins & Policies see the documentation section on Plugins and Policies.

Registry actions

The following pages will cover the common registry actions that users need to know to work with Bytesafe registries.