Set up your repository

Point a repository's installs and publishes at a PackageMaze Feed. Committed files carry the Feed URL, never a Token secret.

With your agent

"Set up this repository to install through PackageMaze."

Inspects the repository and its CI for every place packages are installed or published.
Writes the package-client configuration that points at your Feed.
Keeps Token secrets out of committed files — auth stays in user-level or CI configuration.
Reviews its own changes for coverage, then proves one install through your Feed before it calls the setup done.

Requires a connected agent. See Connect your agent.

By hand

Commit one file per project. With the GitHub App installed, PackageMaze finds each project in the repository and lists it on the Projects screen. The Feed Configuration page in the app shows each file with your Feed filled in and only the lines it needs.

npm-compatible Feeds

.npmrc

registry=https://pkg.packagemaze.com/<organization>/<feed>/
replace-registry-host=npmjs

pnpm, publishing, and lockfiles: Set up npm and pnpm.

PyPI Feeds

pyproject.toml (uv)

[[tool.uv.index]]
name = "packagemaze"
url = "https://pkg.packagemaze.com/<organization>/<feed>/simple/"
publish-url = "https://pkg.packagemaze.com/<organization>/<feed>/legacy/"
default = true
authenticate = "always"

pip, Poetry, and publishing: Set up pip, uv, and Poetry.

Credentials

Keep Token secrets out of Git. Locally, supply the Token as MAZE_TOKEN, ideally from your operating system's keychain. CI mints a short-lived Token per run: Set up CI.