aptly vs Gemfury

aptly manages Debian package repositories and publishes controlled package sets for systems that use apt. It can mirror remote repositories, maintain local repositories, pull selected package versions with dependencies, and publish repositories. Immutable snapshots can be compared, merged, filtered, searched and used to create repeatable package environments with controlled changes and rollback to earlier versions. Mirroring supports regular and flat repositories over HTTP(S) and FTP, with filters for architectures, components and packages. Packages from mirrors and local repositories are kept in a deduplicated pool that can be searched and cleaned up. Repositories can be published to local storage, Amazon S3, OpenStack Swift, Azure or JFrog Artifactory Storage, and signed with a user-provided GnuPG key. aptly is free and available as a CLI tool and HTTP REST service. Its REST API has no authentication or protection, and the embedded web server is described as unsuitable for production use.

Gemfury is a hosted repository for public and private software packages. It supports RubyGems, npm, PyPI, Go Modules, Composer, Maven, DEB, RPM, Bower, and NuGet. Packages can be uploaded through a web interface or command line, with transfers to the repository over SSL. Private packages can be deployed through a Gemfury Repo URL using existing package-management tools and workflows. Gemfury says a secret token in the URL protects packages, and uploads, deployments, and installations use SSL. Users can share an account with coworkers; business plans add separate billing, multi-ownership, and fine-grained permission control. The Free plan costs nothing and includes unlimited collaborators, public packages, and versions, but no private packages. Personal 1C costs $9 a month for one collaborator; Team 10P costs $25 a month for unlimited collaborators and 10 private packages. Gemfury offers a 14-day trial without a credit card and says trial use has no limits. Packages are deleted one month after account cancellation and cannot be recovered.