Skip to content
PackageMaze logo

PackageMaze

Routes npm and PyPI installs through one private feed, applying release-age, licence and allowlist policies to each version.

Actively maintained

For developersAgentsCompliance
packagemaze.com ↗GitHubX
Open packagemaze.comAlternativesSet it up for my team
PackageMaze: data, price, alternatives
  • Is it safe? We have not read the data policy of PackageMaze yet. Read it on the official site before you upload anything.packagemaze.com ↗
  • Is it free? We have not read the prices of PackageMaze yet; they are next in our queue. Until then, the official site has them.packagemaze.com ↗
  • What else does this? We have not measured alternatives for this one yet. If you know one, add it below.See ↓
At a glancechecked Oct 26, 2026

not read yet

Use

For
Engineering teams and their coding agents installing private and public npm or PyPI packages through one feed.
Activity
Actively maintainedrelease 3 weeks ago
Used for
  • route npm and PyPI installs through one private feed
  • hold new package releases for review before install
  • record which agent installed which package version
Worth knowingcomputed from what we read · each with its source
How a program reaches itfound, not claimed · read Oct 27, 2026
  • MCP servercom.packagemaze/packagemazeverified in the MCP registry
  • Stateanswers, requires sign-inchecked 2026-10-27
  • Address to connectapi.packagemaze.com/mcp

MCP server details →

This card as JSON, for your agent →

Each line is something a program found when it went looking: the registry entry, the server's own answer, a spec that parses. A missing line means we did not find it, not that it does not exist.

Not it? Say what you need

beta

Three tools from the Atlas for the job you describe, each with what fits and what does not.

From people who use itnot part of the reading

No notes yet. What do you use PackageMaze for?

Sign in to leave a note
Questions this page answers
  • What is PackageMaze?

    Routes npm and PyPI installs through one private feed, applying release-age, licence and allowlist policies to each version.

  • Who is PackageMaze for?

    Engineering teams and their coding agents installing private and public npm or PyPI packages through one feed.

  • Do people use PackageMaze?

    Little sign of use.

  • Is PackageMaze still maintained?

    Actively maintained: release 3 weeks ago.

How we read a tool

No votes, no reviews, no vendor claims. Every week a crawler reads each tool's own site and a few public registries, and the words on the card are bands over what it read.

  • Use: visits to the site (estimated), installs from npm and PyPI, presence in Chrome's usage report.
  • Activity: the newest release on GitHub, npm or PyPI; the newest dated page on the site; open roles on a public jobs board.
  • Price: the vendor's own pricing page, read with the date. A figure is printed only when it is on that page.
  • The line and the use cases are written by us from the homepage, one tool at a time, and refused when they repeat the vendor's marketing.

How AI assistants read each site — the reading vendors ask us about — is on each tool's own visibility page.

How we read every tool → · By INITE Atlas Desk