Gemfury vs Nexspence

Gemfury is a hosted repository for public and private software packages. It supports RubyGems, npm, PyPI, Go Modules, Composer, Maven, DEB, RPM, Bower, and NuGet. Packages can be uploaded through a web interface or command line, with transfers to the repository over SSL. Private packages can be deployed through a Gemfury Repo URL using existing package-management tools and workflows. Gemfury says a secret token in the URL protects packages, and uploads, deployments, and installations use SSL. Users can share an account with coworkers; business plans add separate billing, multi-ownership, and fine-grained permission control. The Free plan costs nothing and includes unlimited collaborators, public packages, and versions, but no private packages. Personal 1C costs $9 a month for one collaborator; Team 10P costs $25 a month for unlimited collaborators and 10 private packages. Gemfury offers a 14-day trial without a credit card and says trial use has no limits. Packages are deleted one month after account cancellation and cannot be recovered.

Nexspence is a self-hosted artifact repository manager positioned as a replacement for other artifact repository managers. It supports 15 formats, including Maven, Docker, npm, PyPI, Go Modules, NuGet, Helm, Cargo, Apt, Yum, Conan, Raw, Conda, and Terraform. Hosted, Proxy, and Group repository types are available across formats, with format-specific exceptions. A one-command migration streams repositories, users, and artifacts from a live Nexus instance and is described as pausable and conflict-safe. Storage can use MinIO, AWS S3, Wasabi, or a local filesystem, with per-repository blob-store assignment. Identity options include OIDC/SSO providers, just-in-time provisioning, and group-to-role mapping. Security controls include LDAP, API tokens, JWT, fine-grained RBAC, and SSRF-protected outbound fetches. OSV.dev scanning covers Maven, npm, PyPI, and Cargo; Docker and OCI scanning requires an operator-supplied Trivy installation. Deployment options include Docker Compose, Helm/Kubernetes, and native packages or archives for Linux, macOS, and Windows. Nexspence is free at free and licensed under GNU AGPL v3 or later.