Depsilo Documentation
Deploy Depsilo, connect package managers, and configure dependency caching and supply-chain policies.
Deploy Depsilo, connect your package managers, and apply supply-chain policies before dependencies enter your builds.
What is Depsilo?
Section titled “What is Depsilo?”Depsilo is an open-source, self-hosted dependency proxy and cache. It sits between package managers and upstream registries, caches dependencies, and applies enabled supply-chain policies to requests passing through the instance.
You can keep using your existing package managers, lockfiles, and installation commands. Only the dependency registry or index URL needs to point to Depsilo.
Get started
Section titled “Get started”Follow the Quick start guide to run Depsilo, complete the initial setup, and verify that the instance is ready. After deployment, select a package manager in the Portal and copy the generated client configuration.
Documentation
Section titled “Documentation”- Connect package managers: Configure and verify clients supported by Depsilo.
- Configure Python: Connect pip, uv, and Poetry to Depsilo.
- Supply-chain security: Learn about minimum release age, malicious-package blocking, and artifact change detection.
- Deployment and configuration: Configure persistence, readiness checks, diagnostics, backup, and recovery.
- Agent and MCP: Add Agent instructions to a project or connect to the read-only MCP endpoint.
Version and scope
Section titled “Version and scope”This documentation applies to the stable v0.9.4 release.
Depsilo is currently designed for single-instance deployments used by individual developers, homelabs, and small teams. It stores state in SQLite, while cached content can be stored on a local filesystem or in S3.
Depsilo is not a general-purpose artifact repository and does not provide multi-node high availability.