Package Registry - CI/CD Glossary Definition
A package registry is a repository that hosts published software packages for a language ecosystem, such as npm, PyPI, Maven Central, crates.io, or RubyGems, that tools download from at install time.
Public vs private
Public registries serve open-source packages; private registries (or scopes within a public one) host internal code. Misconfiguring which is preferred enables dependency confusion attacks.
In CI
Caching the registry download or proxying through a local mirror cuts install time and protects builds against upstream registry outages.
Related guides
Artifact Registry - CI/CD Glossary DefinitionArtifact Registry: An artifact registry is a server that stores and serves build outputs (container images, J…
Scoped Package - CI/CD Glossary DefinitionScoped Package: A scoped package is an npm package namespaced under an `@scope/` prefix, like `@latchkey/cli`…
Dependency Confusion - CI/CD Glossary DefinitionDependency Confusion: Dependency confusion is a supply-chain attack where a public package is published under…