Has anyone else had nothing but trouble with Artifactory? We are furiously migrating away from it to Github packages for our internal NPM repository. Their uptime has been abysmal.
We've been using their SaaS version for about 4 years now. Maybe a couple of hours of downtime during that.
Unfortunately GitHub has been going down for multiple days this year, they've definitely outpaced our Artifactory instance in terms of downtime.
In addition to what others have said, I think Amazon's Elastic Container Registry is a huge threat to JFrog's prospects. Perhaps they need to IPO now to gain access to the deep pools of capital they'll require to face down the threat from Amazon. Or maybe this is one of those IPOs like SendGrid that is fairly quickly followed by an acquisition.
Both ECR and CodeArtifact are competition from AWS. If you're already using AWS it's difficult to justify the switch to Artifactory, considering you also lose integrations with things like instance roles when you switch.
We have tried to switch over to CodeArtifact but it doesn't support as many repo types as Artifactory. :( We use generic type repos a lot.
With Helm, there is no need for Artifactory. You get Harbor, Verdaccio, etc. It is silly to pay a company 100k+ when all this stuff is easily managed using official or far more powerful tools.
Helm has a much narrower use case. Artifactory can host a wide range of artifacts. For example Artifactory can host and proxy maven, NPM and similar programming language library repositories.
I guess I've not worked in big enough corporates to use this. Can any user here provide some context what JFrog does? The website doesn't really say much, the example pipeline files for JFrog pipelines seem more complex than GitLab CI.
I think the big part that everyoen missed, is that other than artifact storage (artifacts are usually what your code becomes, like the usable end product, and also stores info to reproduce and audit, etc etc) is that JFrog is also putting lots of efforts into full fledged software distribution pipelines, which is what these big enterprises need.
There is also the whole DevSecOps sections of their product, and though OSS is not as big, they are giving out plenty back to the community by hosting ChartCenter (Helm), GoCenter (Go-lang), JCenter (Java), and Conan (C/C++)
NuGet is "one" of the packages that Artifactory can host (in addition to NPM, RPM, Python, etc etc etc)
You can also have unlimited private repos, and unlimited cache repositories for proxying public repos
Can they not compete with Amazon? The developers know the product best.
ElasticSearch or Redis seem like a good example of the challenges with that approach. Managing contracts is tedious and there's a substantial convenience factor for the difference between “click and it's running on your existing bill” and “go somewhere else, get setup with a license, take over O&M for your own servers”. If it's really critical, you'll do that but a company has to be really dependent on a piece of sof…
Jfrog is available on AWS marketplace, so at least they have the same convenience even if papa Jeff still takes a cut.
I guess I've not worked in big enough corporates to use this. Can any user here provide some context what JFrog does? The website doesn't really say much, the example pipeline files for JFrog pipelines seem more complex than GitLab CI.
I thought they were more known for package registries and hosting (eg conan) than CI.
def more known for Artifactory (and community spin-offs like Conan and JFrog Container Registry), but CI/CD has become the core growth as the artifact storage is pretty robust at this point
Artifactory provides NuGet feeds. We even get the public packages (https://nuget.org/) from an Artifactory feed. (Our build servers don't have internet access.)
I guess I've not worked in big enough corporates to use this. Can any user here provide some context what JFrog does? The website doesn't really say much, the example pipeline files for JFrog pipelines seem more complex than GitLab CI.
For me JFrog is synonymous with Artifactory -- I think that was their earliest / bread & butter product? That may just be my interaction. It's an on-premise/cloud hybrid source artifact repository. The nice thing about it is that it is one product that can act as a maven/npm/pip/etc. repo. If you're in a polyglot org (big enterprise) and you have security needs/historical baggage to host on-premise (big enterprise) t…
Though Artifactory is currently still listed as being OSS on their site ( https://jfrog.com/open-source/ ) they stopped publishing the source code after the 7.0 release of Artifactory (somewhere beginning this year). I guess this could be the reason. Having an OSS product is not something investors get thrilled about... Usually JFrog is pretty responsive on StackOverflow though for this particular question they seem…
Rightly so, considering the next step for a lot of such OSS projects is AWS offering it as paid hosted service with zero benefit to the maintainers. So then they have to couple it with a restrictive license which devalues the "open" part.
> Their proprietary license protecting their code set competitors and intentional clones back days, weeks or months ... years ago.