Coverage

Nine ecosystems, one proxy

Feature coverage per ecosystem, including the gaps.

Ecosystem	Proxy	Private packages	Provenance	Quarantine	Cached
npm	✓	✓	✓ (sigstore)	✓	18.4 TB
PyPI	✓	✓	✓ (PEP 740)	✓	12.1 TB
Maven	✓	✓	✓ (GPG)	✓	9.8 TB
Cargo	✓	✓	partial	✓	2.4 TB
Go modules	✓	✓	✓ (sumdb)	✓	6.1 TB
NuGet	✓	✓	✓ (author sign)	✓	4.2 TB
RubyGems	✓	✓	partial	✓	1.8 TB
Debian / Ubuntu apt	✓	✓	✓ (repo sig)	—	14.6 TB
Container images	✓	—	✓ (cosign)	✓	22.9 TB

Configuration

.npmrc

registry=https://parcel.build/npm/acme/
//parcel.build/npm/acme/:_authToken=${PARCEL_TOKEN}
provenance=true

pip.conf

[global]
index-url = https://parcel.build/pypi/acme/simple/
trusted-host = parcel.build
require-hashes = true

settings.xml

<mirror>
  <id>parcel</id>
  <mirrorOf>*</mirrorOf>
  <url>https://parcel.build/maven/acme/</url>
</mirror>

bash

export GOPROXY=https://parcel.build/go/acme,direct
export GONOSUMDB=none
export GOSUMDB=sum.golang.org

bash

deb https://parcel.build/apt/acme/debian trixie main contrib