Berlin-based operation offering a security-focused Maven, npm, PyPI, Go and Docker package registry built for SME software supply chains.

Craftifact is a Berlin-registered artifact and package repository service aimed squarely at small and mid-sized engineering teams rather than large enterprises. It supports the common package ecosystems — Maven, npm, Python, OCI/Docker images, and Go modules — through a single hosted repository with EU-only data residency.

Beyond plain storage, it layers in software bill-of-materials (SBOM) tracking, vulnerability visibility, role-based access tokens, and messaging around EU Cyber Resilience Act readiness. It is a very small operation compared to larger competitors, but it is a real, currently-operating, EU-registered business.