GitHub Package Registry is a package hosting service provided by GitHub. It allows you to publish, share, and manage software packages directly within your GitHub repositories. - Source: dev.to / 7 months ago

Ideally you run your the build step on CI and push the built image into container registry (like dockerhub or ghcr). You can then download the image on server and run it. You can do this with docker-compose as well, just use the image instead of dockerfile to define your web app like you do with proxy and DB. Source: about 1 year ago

Package Hosting & Container Registry (Free for public repos,500 MB storage & 1GB bandwidth outside CI/CD free for private repos). - Source: dev.to / over 1 year ago

There are more Container registries but Docker Hub, such as Github Registry, Amazon ECR, to name a few. We can change the registry anytime by using the command docker login. - Source: dev.to / almost 2 years ago

You can use your github account as your own NPM registry using github packages. Source: almost 2 years ago

Note: Satis is a local repo repository — the pro code is likely not on github. They set up their own system to handle these repositories outside of github/packagist. Source: over 1 year ago

If you want/need to self-host this internally, you can look at satis to create and self-host a repository. Since you need to add the packages manually, your security team can vet the code before adding it. There is a post on gitconnected on how to set this up: https://levelup.gitconnected.com/how-to-host-your-own-private-packagist-for-free-or-extremely-cheap-faf44eca3647. Source: almost 2 years ago

We have a private Satis instance. Our ITSec team reviews all packages before we add them to Satis. Packagist.com is available for us but the CI-CD servers can reach only the private Satis. Source: almost 2 years ago

My team and I use Satis to accomplish that. It's hosted on our servers and we can easily release new versions. Dependabot can even upgrade the dependencies if new ones are detected. Source: almost 2 years ago

Composer supports multiple types of custom respositories, so you can host your own repository (with something like Satis), pay for a packagist.com private repository or even use a VCS repository to fetch packages directly from your private GIT repos. Source: over 2 years ago