What's New
13 Package Registries
NORA now supports 13 package formats in a single binary:
| Registry | Path | Status |
|---|---|---|
| Docker | /v2/
| Core |
| Maven | /maven/
| Core |
| npm | /npm/
| Core |
| PyPI | /pypi/
| Core |
| Cargo | /cargo/
| Core |
| Go | /go/
| Core |
| Raw | /raw/
| Core |
| RubyGems | /gems/
| New |
| Terraform | /terraform/
| New |
| Ansible Galaxy | /ansible/
| New |
| NuGet | /nuget/
| New |
| Pub (Dart) | /pub/
| New |
| Conan (C/C++) | /conan/
| New |
Declarative Registry Selection
Declarative [registries] configuration section:
# Enable only what you need
[registries]
enable = ["docker", "npm", "pypi"]
# Enable all except specific ones
[registries]
enable = ["all", "-maven"]
# Enable all
[registries]
enable = "all"Also available via environment variable:
NORA_REGISTRIES_ENABLE="docker,npm,pypi"Three-tier priority: NORA_REGISTRIES_ENABLE (env) > [registries].enable (TOML) > legacy per-registry enabled flags.
Curation Layer
Policy-based artifact governance with three modes:
- enforce — block artifacts that violate policies
- audit — log violations without blocking
- off — no curation (default)
CLI commands: nora curation validate, nora curation explain
Architecture Documentation
ARCHITECTURE.md(EN + RU) — full system design, 10 ADRs, trade-off analysisCONTRIBUTING.md— contributor guide
Other Improvements
- Multi-stage Dockerfile with BuildKit cache mounts (4 targets: builder, release, demo, dev)
- Flat sidebar UI navigation
- 839 tests, 0 clippy warnings
- Dynamic registry loading (
enabled: boolper format)
Breaking Changes
None. Full backward compatibility with v0.6.x configuration.
Install
curl -fsSL https://getnora.io/install.sh | shOr download the binary directly:
curl -LO https://github.com/getnora-io/nora/releases/download/v0.7.0/nora-linux-amd64
chmod +x nora-linux-amd64
sudo mv nora-linux-amd64 /usr/local/bin/noraDocker
Alpine (standard):
docker pull ghcr.io/getnora-io/nora:0.7.0RED OS:
docker pull ghcr.io/getnora-io/nora:0.7.0-redosAstra Linux SE:
docker pull ghcr.io/getnora-io/nora:0.7.0-astraUpgrade
# Helm
helm repo update
helm upgrade nora nora/nora --version 0.3.0What's Changed
- docs: update roadmap — mark cosign done, split pre/post 1.0 by @devitway in #181
- ci: add short-sha into docker tags by @makavity in #182
- fix: use semver pattern for version-sha Docker tags by @devitway in #192
- feat: curation layer — blocklist, allowlist, integrity, CLI (#184-#190) by @devitway in #194
- feat: 6 new registries, curation layer, 13-format UI by @devitway in #195 (Pub registry based on #191 by @mit-73)
- docs: trim README, update llms.txt for 13 registries by @devitway in #196
- feat: declarative registry selection, ARCHITECTURE.md by @devitway in #197
- chore: release v0.7.0 by @devitway in #198
New Contributors
- @makavity made their first contribution in #182
- @mit-73 contributed the Pub (Dart) registry implementation (#191, cherry-picked into #195)
Full Changelog: v0.6.5...v0.7.0