Skip to content
SPECIFICTION
Get listed

NORA

getnora.dev

Free plan WebLinuxSelf-hosted
Visit getnora.dev
Spec score 7.7 #42 of 64 in Artifact repository software

Spec sheet

Product
NORA (No-nonsense Open Registry for Artifacts) is an open-source, multi-protocol artifact registry built with Rust.Read 9 Oct 2026 · getnora.dev
Deployment
The maker documents running NORA with Docker and provides a Kubernetes Helm chart.Read 9 Oct 2026 · getnora.dev
License
The maker describes NORA as open source under the MIT License and free forever.Read 9 Oct 2026 · getnora.dev
Authentication
The quick start shows enabling authentication with an htpasswd file, and says authentication can be enabled with NORA_AUTH_ENABLED=true.Read 9 Oct 2026 · getnora.dev
Client integrations
The quick start demonstrates using Docker, npm, Go modules, and Helm OCI with a NORA registry.Read 9 Oct 2026 · getnora.dev
Curation
Its curation layer supports blocklists, allowlists, CVE blocking, and integrity verification.Read 9 Oct 2026 · getnora.dev
Curation integration
The maker documents Dozor as a companion tool that creates OSV advisory blocklists for NORA to enforce.Read 9 Oct 2026 · github.com
Curation modes
Curation can be set to off, audit, or enforce; enforce mode blocks matching requests with a 403 response.Read 9 Oct 2026 · getnora.dev
Maintainer
The repository says NORA was created and is maintained by Pavel Volkov.Read 9 Oct 2026 · github.com
Proxy and cache
NORA can transparently proxy upstream registries and cache artifacts locally.Read 9 Oct 2026 · getnora.dev
Registry formats
The documentation lists support for 13 formats, including Docker, Maven, npm, PyPI, Cargo, Go, and Raw.Read 9 Oct 2026 · getnora.dev
Startup and footprint
The documentation describes a single binary with no database or Java dependency, a startup time of about three seconds, and a binary under 23 MB.Read 9 Oct 2026 · getnora.dev
Storage integration
The maker lists AWS S3, Ceph RGW, and other S3-compatible backends for storage.Read 9 Oct 2026 · github.com
Support for air-gapped use
NORA includes a mirror CLI for offline synchronization in air-gapped environments.Read 9 Oct 2026 · github.com

Plans and prices

NORA Free MIT licensed · self-hosted artifact registry Read 9 Oct 2026 · getnora.dev

Every NORA plan and price →

Where Specifiction places it

Alternatives to NORAAll alternatives →