Pricore

A private Composer registry you can depend on.
Fast, self-hosted, and built for PHP teams who are tired of fragile workarounds.
Manage your packages with a registry that just works.

Website · Documentation · Hosted Pricore

#About Pricore

Managing private PHP packages should be simple. Pricore makes it that way. It provides a centralized, reliable way to store package metadata, control access with tokens, and integrate seamlessly with Git-based workflows.

With Pricore, teams gain full ownership of their package ecosystem while keeping dependency management fast, consistent, and transparent.

Don't want to self-host? Try Hosted Pricore — a fully managed registry with zero setup.

#Why Pricore?

• Stay in control - Keep your private packages on your own infrastructure. No third-party servers, no external dependencies.
• Skip the manual work - Webhook-driven updates, a web dashboard, and full Composer v2 API support. Out of the box.
• Use what you know - Built on Laravel. If your team already knows the stack, you can run, extend, and contribute to Pricore from day one.

#Features

• Git-Based Mirroring - Point at any GitHub, GitLab, Bitbucket, or generic Git repo. Automatic syncing via webhooks.
• Registry Mirrors - Import packages from Packagist or other Composer registries with dist mirroring.
• Composer v2 Native - Full API support with lightning-fast package resolves.
• Security Auditing - Vulnerability scanning via Packagist advisories with native composer audit support.
• Web Dashboard - Browse packages, manage tokens, and view download stats in realtime.
• Built on Laravel - Familiar stack, easy to extend. Open source under Apache 2.0.

#Quick Start with Docker

60 seconds to a working registry. Three commands. That's all it takes.

1. Download the compose file

curl -o docker-compose.yml https://raw.githubusercontent.com/pricorephp/pricore/main/docker-compose.yml

2. Start the application

Migrations and setup run automatically on first boot.

docker compose up -d

3. Create your first user

Then open http://localhost:8000 and start adding packages.

docker compose exec app php artisan pricore:install

The entrypoint automatically generates an APP_KEY, creates the SQLite database, runs migrations, and caches configuration on first boot. For production, you can provide your own APP_KEY via environment variable.

For manual installation, configuration, and production deployment guides, see the documentation.

#Contributing

We welcome contributions! See CONTRIBUTING.md for development setup, guidelines, and how to get started.

#Security

If you discover a security vulnerability, please send an email to security@pricore.dev instead of using the issue tracker. All security vulnerabilities will be promptly addressed.

#License

Pricore is open-source software licensed under the Apache License 2.0.

Made with 💚 for the PHP community