kkRepo

Spec sheet

Purpose

kkRepo is a community-driven, open-source, self-hosted artifact repository designed to address limitations of Sonatype Nexus Community Edition.Read 11 Oct 2026 · github.com

Product

kkRepo is a community-driven, fully open-source, self-hosted artifact repository.Read 11 Oct 2026 · github.com

Intended users

The README says kkRepo is designed for deployments where stability, scalability, multi-replica deployment, or management of many packages matters.Read 11 Oct 2026 · github.com

Integrations

The README lists Prometheus metrics export and Grafana dashboards for observability.Read 11 Oct 2026 · github.com

Support

The README directs users to a Telegram group for community support and usage discussion.Read 11 Oct 2026 · github.com

Maker

The GitHub profile identifies the project maintainer as KL (klboke) and lists Shanghai, China.Read 11 Oct 2026 · github.com

Access control

Authentication options include Local, LDAP, and OIDC, with configurable anonymous access and fine-grained permissions.Read 11 Oct 2026 · github.com

Access controls

Authentication options include Local, LDAP, and OIDC, with configurable anonymous access and fine-grained permissions.Read 11 Oct 2026 · github.com

Artifact security

Artifact scanning can generate CycloneDX SBOMs, match known vulnerabilities, manage policies and waivers, and optionally enforce download rules.Read 11 Oct 2026 · github.com

Deployment and storage

The service supports MySQL or PostgreSQL metadata backends and OSS/S3 or File blob storage.Read 11 Oct 2026 · github.com

Deployment downloads

Release 1.3.1 provides JVM archives requiring Java 25, native archives for Linux amd64 and arm64, and container images for both architectures.Read 11 Oct 2026 · github.com

Deployment packages

The deployment guide documents Docker images and JVM and Native archive packages; the published Native images support Linux amd64 and arm64.Read 11 Oct 2026 · github.com

High availability

The project supports multi-replica deployments.Read 11 Oct 2026 · github.com

Intended use

The project says it is designed for deployments where stability, scalability, multi-replica operation, or management of a large number of packages matters.Read 11 Oct 2026 · github.com

Nexus migration

It supports migration from Sonatype Nexus, including a one-click migration flow and preservation of repository domains and URLs.Read 11 Oct 2026 · github.com

Observability

It exports Prometheus metrics and provides Grafana dashboards.Read 11 Oct 2026 · github.com

Open-source license

kkRepo is released under the Apache License 2.0.Read 11 Oct 2026 · github.com

Package formats

The README lists support for more than 20 artifact formats, including Maven, npm, PyPI, Docker/OCI, NuGet, Terraform, and Hugging Face Models.Read 11 Oct 2026 · github.com

Repository types

Supported formats can use hosted, proxy, and group repository types, with availability varying by format.Read 11 Oct 2026 · github.com

Security reporting

The security policy asks users to report exploitable vulnerabilities privately through GitHub Security Advisories; security fixes target the latest main branch unless a release branch is announced.Read 11 Oct 2026 · github.com

Security scanning

Artifact scanning includes CycloneDX SBOM generation, known-vulnerability matching, policy and waiver management, and optional download enforcement.Read 11 Oct 2026 · github.com

Storage and databases

Artifact blobs can use OSS, S3, or file storage, while metadata and shared runtime state use MySQL or PostgreSQL; MySQL is the default.Read 11 Oct 2026 · github.com

Supported formats

It supports more than 20 package formats, including Maven, npm, PyPI, Docker/OCI, NuGet, Cargo/Rust, and Hugging Face Models.Read 11 Oct 2026 · github.com

Where Specifiction places it

• Artifact repository software#51 of 647.4