Artifact management
Hosted, proxy, and group repository flows with package metadata, storage, and lifecycle management.
S3T · Secure software delivery
Manage package flow from one place.
Smart Kubaba brings package management, risk visibility, and policy decisions into one self-hosted platform.
Organizations
Manage project and repository ownership.
Repositories
Manage hosted, proxy, and group package flows.
Artifacts
Search packages, versions, and metadata.
Policy
Define scoped security decisions.
Vulnerabilities
See OSV vulnerabilities in component context.
Repository Firewall
Evaluate packages with PASS, WARN, or BLOCK decisions.
Scans
Track CycloneDX SBOM scans and results.
Audit
Review access, policy, and operation records.
Our focus
Three needs. One platform.
Repository management, security intelligence, and policy decisions operate through the same product.
Supply-chain visibility
Component, finding, and dependency context from OSV vulnerability data and CycloneDX SBOM scans.
Policy and governance
PASS, WARN, or BLOCK decisions across organization, project, and repository scopes, with time-bound risk acceptance and audit trails.
An S3T product
Smart Kubaba
Manage packages, see risk, and enforce policy.
Sixteen native formats are client-verified. Raw provides generic storage; Hugging Face provides limited compatibility.
- An explicit support matrix for 18 formats
- Self-hosted deployment and organizational data control
- Identity, access, audit, and operations layer
Communication principles
Clear scope. Clear boundaries.
Evidence-led scope
We verify native format support with real package-client acceptance tests.
Explicit protocol boundaries
We do not present limited scopes such as a Terraform mirror or Hugging Face compatibility as full protocol support.
No unmeasured commitments
We do not publish capacity, SLA, or commercial limits without validated data.
Technical evaluation
Evaluate your package flow on Smart Kubaba.
Let’s review your formats, deployment, and security policies together.