npm vs Packagist

npm is a JavaScript package registry and command-line tool for sharing code and managing packages. The Registry and CLI are free for public package use, and the Free plan lets public package authors publish unlimited public packages. npm accepts package.json folders, gzipped tarballs, URLs, name-and-version or name-and-tag references, and Git URLs. Its tools support dependency resolution, lockfiles, workspaces, private registry authentication, and offline installation. It runs on Linux, macOS, Windows, and other operating systems through Node.js installers or version managers. For private packages, the Paid user account plan is $7 a month; Pro is also $7 a month for individual creators, while Teams is $7 per user per month for teams and organizations. Pro includes unlimited private packages and package-based permissions; Teams adds team-based permissions. Organizations can manage members, teams, roles, permissions, and package access. All plans include basic support and automatic security warnings. Paid billing starts when card details are submitted, with the first month charged immediately.

Packagist is the default Composer package repository for PHP developers. It helps them discover public packages and tells Composer where to retrieve the code. To publish, a user submits a public repository URL, which Packagist checks periodically. New versions are gathered from repository tags, while branches are shown as development versions. Hooks or webhooks from GitHub, Bitbucket, GitLab, and Gitea can trigger automatic package updates. The API supports searching and listing packages, retrieving package data, and viewing download statistics, among other operations. Many endpoints can be used anonymously; authenticated ones accept bearer tokens or a username and API token. Packagist.org is free to publish open-source PHP packages. The maker says stable versions cannot be silently replaced with different code. The service is for public packages, and users seeking to share private code are directed to Private Packagist. Packagist Conductors GmbH, registered in Berlin, says it has operated Packagist.org since its creation in 2012. Separate sponsorship plans are available at 2500.00 EUR, 5000.00 EUR, and €8,000 a month, each with an annual commitment.