Skip to main content

The Private Composer Registry for Teams.
Unlimited Seats. Flat Pricing.

Stop paying €50-700/month. Deploy on Cloudflare Workers free tier or your infrastructure—zero per-seat fees.

Free tierToken authEdge cacheAudit logs
ComposerCLI • CI/CD
①③
PACKAGE.brokerGateway & Cache
StorageS3 • R2 • MinIO
Package Sources
Git Repos
GitHub
GitLab
Bitbucket
Composer Repos
Packagist
Private
Satis

Request

Composer requests a package from PACKAGE.broker

Cache Miss: Fetch & Store

If not cached, fetch from source and store for future requests

Cache Hit: Serve Fast

Serve from cache for instant package delivery

See It In Action

Real screenshots from PACKAGE.broker dashboard

PACKAGE.broker Dashboard Overview

Dashboard showing repositories, cache stats, and recent activity

Add Repository Source

Add GitHub, GitLab, or Bitbucket repositories in seconds

Token Management

Secure token-based authentication for CI/CD pipelines

Packages View

Browse and manage cached Composer packages

PACKAGE.broker Dashboard Overview

Dashboard showing repositories, cache stats, and recent activity

Works exactly like you expect.

Stop paying per-seat for private package hosting. Configure your proxy once, and use standard Composer commands forever.

  • Zero build steps
  • Instant updates via Webhooks
  • Authenticated by Tokens
$ npx wrangler deploy

✨  Deploying to Cloudflare Workers
✓  Deployed successfully
→  https://package-broker.your-subdomain.workers.dev

$ composer config repositories.private composer \
  https://package-broker.your-subdomain.workers.dev

$ composer require my-org/premium-package
✓  Package installed successfully

The "S.O.S." Strategy

Secure. Open. Serverless.

Zero Cost Core

Runs on top of Cloudflare Workers Free Tier. No hidden costs, no per-seat pricing.

Serverless Compatible

Deploy anywhere (Cloudflare, AWS, DigitalOcean) with zero infrastructure management overhead.

SOC-2 Ready

Built with compliance in mind. Secure token-based access, encrypted credentials, and audit logging.

Built for Agencies Like Yours

Real problems solved by PACKAGE.broker

Sell Premium Extensions Securely

You need to distribute premium Magento/Shopify extensions to paying customers without exposing source code.

PACKAGE.broker provides token-based authentication, so only authorized clients can access your private packages.

Result:

Protect your IP while maintaining seamless installation for customers.

Speed Up CI/CD Installs

CI pipelines wait minutes for packages to download from GitHub or external sources, slowing down deployments.

PACKAGE.broker caches packages at the edge, serving them instantly to your CI/CD runners.

Result:

Reduce CI install times from minutes to seconds, cutting build costs and improving developer experience.

Keep Dependencies Under Control

Managing private packages across multiple projects requires manual updates and version tracking.

Centralize all private packages in one place with webhook-triggered updates and version management.

Result:

One source of truth for all dependencies, with automatic updates and complete audit trails.

Deploy Anywhere

Choose the platform that fits your infrastructure

Docker

1-Click Setup

Best for: Self-hosted deployments

Try Now

AWS

App Runner

Best for: AWS-native infrastructure

Planned

VPS

Ubuntu/Debian

Best for: Traditional server hosting

Planned

Kubernetes

Helm Chart

Best for: K8s clusters

Planned

DigitalOcean

Apps Platform

Best for: DO App Platform

Planned

Roadmap: Kubernetes deployment is planned for Q2 2025. Docker and Cloudflare Workers are available now.

Calculate Your Savings

See how much you can save by switching to PACKAGE.broker

ROI Calculator

See how much you can save by switching to PACKAGE.broker

5 developers
Annual Savings
700
Current: €700 → PACKAGE.broker: €0
Setup Time
10 minutes
One-time setup
Maintenance
0 hours/year
Ongoing maintenance

Saving €700/year? Consider sponsoring with just 10% of your savings.

Feature Comparison

See how PACKAGE.broker compares to other solutions

Last verified: December 23, 2025

FeaturePACKAGE.brokerPrivate PackagistSatisPacketonRepmanGitLab
Deployment Model
Self-hosted (Cloudflare Workers, Docker, Kubernetes)
SaaS (hosted) or Self-hosted (on-premise)
Self-hosted (static generator)
Self-hosted
Self-hosted
SaaS (GitLab.com) or Self-hosted (GitLab EE/CE)
Private Packages
Web UI / Dashboard
Modern web dashboard
Web-based management
None (static HTML only)
Web UI
Web UI
Integrated in GitLab UI
Webhook Sync
Artifact Caching
Edge caching (Cloudflare) + Storage backend
Vendor-managed
Static mirror (optional)
Unknown
Proxy cache
Integrated storage

All trademarks are property of their respective owners. This project is not affiliated with, endorsed by, or sponsored by any third-party services. See Legal Notice for details.

Frequently Asked Questions

Everything you need to know about PACKAGE.broker

Yes! Cloudflare Workers free tier includes 100,000 requests per day, which is sufficient for most small agencies. For larger teams, you can upgrade to Cloudflare Workers Paid ($5/month) or deploy on Docker/Kubernetes for unlimited usage.

PACKAGE.broker uses secure token-based authentication. Generate tokens in the dashboard, then use them in your composer.json or CI/CD environment variables. Tokens can be scoped to specific repositories and have expiration dates for enhanced security.

Yes! PACKAGE.broker supports all major Git providers: GitHub, GitLab, Bitbucket, and any Git repository accessible via HTTPS or SSH. You can also connect to Composer repositories like Packagist, Private Packagist™, or Satis instances.

Docker and Kubernetes support are in active development as part of our architectural refactor. Cloudflare Workers is available now and recommended for most use cases. We'll announce Docker availability in our GitHub releases and documentation when ready.

Yes! PACKAGE.broker is built with compliance in mind. It includes token-based access control, encrypted credential storage, comprehensive audit logging, and follows security best practices. While we don't provide SOC-2 certification (that's your responsibility), we provide all the tools and documentation needed for your audit.

PACKAGE.broker caches packages at the edge (Cloudflare) or in your storage backend (S3, R2, MinIO). On first request, packages are fetched from source and stored. Subsequent requests are served instantly from cache, dramatically reducing install times. Cache invalidation happens automatically via webhooks or manually through the dashboard.

Support Sustainable Open Source

PACKAGE.broker is free and open source. If it saves your agency time (and money), please consider sponsoring ongoing maintenance, security, and support.

Individual

$5/mo
  • Name in README
  • Community Discord access
  • Early feature access
Sponsor on GitHub
Most Popular

Agency

$25/mo
  • Logo placement on website (with backlink)
  • Prioritized attention to issues you report
  • Migration help for client projects
  • Direct maintainer contact via GitHub Discussions
Sponsor on GitHub

Enterprise

$250/mo
  • Priority support channel (GitHub)
  • Roadmap input & custom requests
  • Security & compliance collaboration
  • Onboarding for your team
Sponsor on GitHub

Saved €700/year? Sponsor with 10% of your savings (€70/year).

Your team’s coffee budget → Sustainable open source

Sponsoring FAQ

GitHub Sponsors handles billing. Pick a tier and manage it from your GitHub account.

Yes — many agencies sponsor from their company account (or a client org) while using PACKAGE.broker across multiple projects.

Sponsored issues and questions are prioritized over non-sponsored requests, but there are no guaranteed response times.

Maintaining releases, security work, and improving documentation, migrations, and operational reliability.