This product was not featured by Product Hunt yet. It will not be visible on their landing page and won't be ranked (cannot win product of the day regardless of upvotes).
Depotex
Every package your teams build and use, on your server
Every company that builds software runs an artifact repository: the server that holds your own packages and caches the ones from Maven Central, npm, PyPI and Docker Hub. Most teams use JFrog Artifactory or Sonatype Nexus. Both work, but they come with a long list of extras sold separately, admin screens from another decade, and nothing for the AI agents that now write and ship half the code.
So I built Depotex: one self-hosted server for every package your teams build and use.
What it does • 18 formats behind one URL: Maven, npm, PyPI, Docker & OCI, Helm, Go, NuGet, Cargo, APT, YUM, Terraform, Hugging Face, Git LFS, Composer, RubyGems, Conda, Conan and raw files. Hosted, proxy and group repositories, so builds keep working when a public registry doesn't. • Supply-chain security in the box: quarantine new or suspect versions ("new npm versions wait 3 days" is one rule), a block list that works through proxies, SBOMs with OSV vulnerability data, and integrity checks on every stored file. • Built for AI agents: a signed MCP plugin lets AI assistants search artifacts, read SBOMs and docs and get download links, signed in as the person using them. Write tools are off by default. • Vibe artifacts: a home for what AI coding tools build, with each check-in's code, memory, known gaps and screenshots, scanned for secrets on every push. • Runs itself: encrypted backups with automatic test restores, policies with a dry run, automation, audit log, Prometheus metrics, SSO and SCIM. One server or a cluster, same features either way.
What I'd love from you Tell me which format or migration path matters most to your team, and what annoys you most about the repository you use today. I'm here all day to answer questions.
No comment highlights available yet. Please check back later!
About Depotex on Product Hunt
“Every package your teams build and use, on your server”
Depotex was submitted on Product Hunt and earned 0 upvotes and 1 comments, placing #336 on the daily leaderboard. Depotex: a self-hosted artifact repository for 18 package formats, with SBOMs, quarantine and policies, on one server or a cluster. From Vectored
Depotex was featured in Developer Tools (522.6k followers), Artificial Intelligence (483k followers) and Security (3k followers) on Product Hunt. Together, these topics include over 234.4k products, making this a competitive space to launch in.
Who hunted Depotex?
Depotex was hunted by Akshay KG. A “hunter” on Product Hunt is the community member who submits a product to the platform — uploading the images, the link, and tagging the makers behind it. Hunters typically write the first comment explaining why a product is worth attention, and their followers are notified the moment they post. Around 79% of featured launches on Product Hunt are self-hunted by their makers, but a well-known hunter still acts as a signal of quality to the rest of the community. See the full all-time top hunters leaderboard to discover who is shaping the Product Hunt ecosystem.
Want to see how Depotex stacked up against nearby launches in real time? Check out the live launch dashboard for upvote speed charts, proximity comparisons, and more analytics.
Akshay KG
Hi Product Hunt 👋 I'm Akshay, maker of Depotex.
Every company that builds software runs an artifact repository: the server that holds your own packages and caches the ones from Maven Central, npm, PyPI and Docker Hub. Most teams use JFrog Artifactory or Sonatype Nexus. Both work, but they come with a long list of extras sold separately, admin screens from another decade, and nothing for the AI agents that now write and ship half the code.
So I built Depotex: one self-hosted server for every package your teams build and use.
What it does • 18 formats behind one URL: Maven, npm, PyPI, Docker & OCI, Helm, Go, NuGet, Cargo, APT, YUM, Terraform, Hugging Face, Git LFS, Composer, RubyGems, Conda, Conan and raw files. Hosted, proxy and group repositories, so builds keep working when a public registry doesn't. • Supply-chain security in the box: quarantine new or suspect versions ("new npm versions wait 3 days" is one rule), a block list that works through proxies, SBOMs with OSV vulnerability data, and integrity checks on every stored file. • Built for AI agents: a signed MCP plugin lets AI assistants search artifacts, read SBOMs and docs and get download links, signed in as the person using them. Write tools are off by default. • Vibe artifacts: a home for what AI coding tools build, with each check-in's code, memory, known gaps and screenshots, scanned for secrets on every push. • Runs itself: encrypted backups with automatic test restores, policies with a dry run, automation, audit log, Prometheus metrics, SSO and SCIM. One server or a cluster, same features either way.
What I'd love from you Tell me which format or migration path matters most to your team, and what annoys you most about the repository you use today. I'm here all day to answer questions.
Docs: https://docs.vectored.dev/depotex/
Contact us: https://vectored.dev/#contact