Host, control, and track every package
Your private packages and the public registries behind one Feed. Every install follows the rules you set, and every version is on record.
- Home
- Feeds
- Projects
- Builds
- Agents
Feeds
- npm
- pypi
Settings
| Package | Serving | Projects | Health | Last activity |
|---|---|---|---|---|
| reactpolicy withheldupstream · npmjs.com | 19.3.0-rc.1 | 12 | Held | published· 4 hours ago |
| @acme/checkout-uiprivate | 2.4.0 | 32 versions | — | checkout-web upgraded to 2.4.0· 2 minutes ago |
| left-pad-clonedelistedupstream · npmjs.com | 1.0.4 | 0 | Delisted | refused· Dana Whitfield· yesterday |
Every install takes the same path
Upstream registries and your own publishes arrive at one Feed. Policy decides what passes, and the address your clients use never changes.
Upstream
npm and PyPI, plus anything you publish yourself
Policy
Release age, licences, allowlist, one version per package
Your Feed
One address for every package your team can install
Install
Developers, CI, and agents, all through the same Feed
Agents install through the same Feed
An agent gets the versions your policy allows and nothing else. A release held for review is held for a coding agent too, and every version it takes is recorded under its own name.
- Claude Code
- Codex
- Cursor
- GitHub Copilot
- GitHub Actions
- CircleCI
Connect an agent over MCP: Connect your agent. Point an agent at this site: Agent quickstart.
Three steps to your first install
No cluster to run and no migration. Developers keep typing the commands they already type.
- 01
Create a Feed
Sign in with GitHub. PackageMaze picks up your Organization, and each Feed gets its own address.
https://pkg.packagemaze.com/acme/npm
- 02
Point your client at it
One registry line in the repository's .npmrc, or your client's equivalent. Lockfiles stay valid, and nothing else changes.
registry=https://pkg.packagemaze.com/acme/npm/
- 03
Install
The Feed serves your private packages and the upstream ones your policy allows, from the same address.
npm install
In GitHub Actions, add uses: packagemaze/setup-maze@v0.0.5 instead of storing a Token. The step exchanges GitHub’s OIDC token for short-lived Feed access.
Connect your GitHub Organization
Access is free while pricing is being settled, and joining now sets your price for later.