Command Palette

Search for a command to run…

ZarynZaryn
Zaryn documentation

Packages and mirrors

A registry for npm, PyPI, Cargo, Zig and containers, and mirrors of the public ones.

Publish packages for the tools you already use, next to the code that builds them, and install from pypi.org, npm, crates.io, GitHub and the Rust and Zig toolchains through mirrors that check every file. Advisories tell you when something you depend on is unsafe.

For Developers and AI teams
Start the tutorial →Open in Zaryn ↗
Learning path

Get started with packages

A guided path from "what is a package?" to safe releases: one registry for npm, PyPI, Cargo, Zig and containers, publishing and installing with your usual tools, mirrors that check every file, private packages, and advisories. Pictures first, every step explained.

⏱ About 25 minutes◔ From zero to advanced
  1. Stage 1Understand
    1. What a package is
    2. Five words you'll see
    3. Why you can trust what you install
  2. Stage 2Publish
    1. Get a publish token
    2. Pick your tool
    3. Publish your first package
  3. Stage 3Install
    1. Install it
    2. Install straight from a repository
    3. Faster installs through the mirrors
  4. Stage 4Ship anything
    1. Container images
    2. Programs, datasets, firmware
    3. Private packages, and space
  5. Stage 5Stay safe
    1. When something you use is unsafe
    2. Names, versions, yanking

What you can do

  • Publish crates, npm, PyPI and Zig packages
  • Push container images
  • Install through mirrors when the originals are slow or blocked
  • Hear about vulnerable dependencies

Start here

Read these in order; the rest you can open when you need them.

  1. 1Get started with packagesA guided path from "what is a package?" to safe releases: one registry for npm, PyPI, Cargo, Zig and containers, publishing and installing with your usual tools, mirrors that check every file, private packages, and advisories. Pictures first, every step explained.
  2. 2Packages, explainedWhat a package is, what a registry does, and how Zaryn hosts packages for Rust, Zig, JavaScript, Python and containers, in plain words. Start here if you have never published one.
  3. 3Mirrors for pypi.org, npm, Go, crates.io, Rust, Zig and their compilersMake pip, uv, npm, go, cargo, rustup and zig download through Zaryn when pypi.org, npmjs.com, proxy.golang.org, crates.io, GitHub or ziglang.org are slow or unreachable. Every file is checked against a hash your tools already know, so the mirror can't change anything.

Every guide in Packages and mirrors

Get started with packages

A guided path from "what is a package?" to safe releases: one registry for npm, PyPI, Cargo, Zig and containers, publishing and installing with your usual tools, mirrors that check every file, private packages, and advisories. Pictures first, every step explained.

Mirrors for pypi.org, npm, Go, crates.io, Rust, Zig and their compilers

Make pip, uv, npm, go, cargo, rustup and zig download through Zaryn when pypi.org, npmjs.com, proxy.golang.org, crates.io, GitHub or ziglang.org are slow or unreachable. Every file is checked against a hash your tools already know, so the mirror can't change anything.

Other products for you

Code hosting and version controlRepositories, branches, pull requests, CI and evals on zev.CI, evals and releasesEvery push built and tested in a locked-down container, and gates that keep main working.Files, storage and encryptionShare files by link, prove they are intact, keep private work encrypted.Private networks and proxyA WireGuard mesh for your machines, and Zaryn on a filtered internet.How it worksContent addressing, the object model, IPFS and provenance.