A policy proxy for npm and PyPI

Give new dependencies time.

Manage package policy across your company’s developer machines and CI. Écluse gives new public releases time before they reach your builds, using the package managers your teams already use.

Set up Écluse See how it works

Self-hosted · Open source · Your registries keep the packages

Écluse is French for a canal lock: a controlled passage.

Where do you want to start?

Get the idea, configure your deployment, or find the detail behind an unexpected result.

01 / UNDERSTAND

Is Écluse a fit?

What it controls, where it sits, and what your team still needs to provide.

Understand Écluse → 02 / SET UP

Get your team connected.

Choose your deployment, package its configuration, and verify an install.

Follow the setup guide → 03 / LOOK UP

Understand the details.

Rule precedence, advisory outages, private reads, and the lifetime of a mirrored copy.

Explore detailed behaviour →

Already operating Écluse? Investigate a failed install →Reviewing the security design? Read the threat model ↗