# oras-project/oras

OCI registry client - managing content like artifacts, images, packages

Repository: https://github.com/oras-project/oras
Canonical: https://ross.abutalabs.com/products/oras
Homepage: https://oras.land
Language: Go
License: Apache-2.0
License Family: permissive
Topics: oci, docker, registry, storage, hacktoberfest
Last push: 2026-08-25T11:29:24+00:00

## Health v2 (maintenance only)
Score: 88/100 (v2, computed 2026-09-03T02:20:16.233290+00:00)
- activity 99, release rhythm 68, longevity 100
- inputs: {"age_days": 2809, "days_push": 8, "days_rel": 54, "gap_med": 106.5, "n_releases_24m": 7}
- flags: none
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 2403, forks 253 (observed 2026-08-28T04:06:43.860597+00:00)

## What it is
ORAS (OCI Registry As Storage) is a CLI tool and set of client libraries for pushing, pulling, and managing arbitrary OCI artifacts in OCI-compliant container registries. It treats media types as first-class, allowing non-container content like supply chain artifacts, packages, and files to be stored without masquerading as container images.

## Use cases
- push and pull arbitrary files to a container registry
- attach SBOMs and signatures to container images
- manage OCI artifacts across registries
- store non-container artifacts in OCI registries
- migrate artifacts between registries
- work with OCI image layouts on the local file system
- build a custom registry client in Go or Python

## When to choose
- you need to distribute non-container artifacts via OCI registries
- you want to attach supply chain metadata to container images
- you need a lightweight registry client without a Docker daemon
- you're building tooling on top of OCI Distribution Spec APIs

## When to avoid
- you only need to build and push container images (use docker or buildah)
- your registry does not implement the OCI distribution spec
- you need general-purpose object storage rather than OCI registries

## Facets
- artifact type: cli-tool
- maturity: active
- function: cli, developer-tools, container-runtime, file-upload, sdk
- domain: developer-tools, cloud-computing, files
- platform: windows, go, cli, cross-platform
- tags: oci, oci-artifacts, container-registry, docker, supply-chain, cncf, artifact-storage, registry-client, containers, devops, linux, macos

## Member repositories
- oras-project/oras (main) score 88

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:06:43.860597+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T02:34:11.855995+00:00, confidence not recorded.
  - readme: https://github.com/oras-project/oras (fetched 2026-08-28T04:06:43.860597+00:00, sha e26c11941934)
  - homepage: https://oras.land (fetched 2026-08-29T10:14:41.199345+00:00, sha 478ec12402ce)
  - site_page: https://oras.land/docs (fetched 2026-08-29T10:14:41.209015+00:00, sha 20882fc53d08)
  - site_page: https://oras.land/docs/1.2 (fetched 2026-08-29T10:14:41.211375+00:00, sha 32e7f74122aa)
  - site_page: https://oras.land/docs/1.1 (fetched 2026-08-29T10:14:41.213179+00:00, sha d87f05349b6e)
  - site_page: https://oras.land/docs/quickstart (fetched 2026-08-29T10:14:41.215063+00:00, sha e9fc94955721)
  - site_page: https://oras.land/docs/installation (fetched 2026-08-29T10:14:41.216795+00:00, sha d2bfaa36da9c)
  - site_page: https://oras.land/docs/how_to_guides/authentication (fetched 2026-08-29T10:14:41.218439+00:00, sha 11da2fa4f9c9)
  - site_page: https://oras.land/docs/commands/use_oras_cli (fetched 2026-08-29T10:14:41.219953+00:00, sha 393085551a38)
  - site_page: https://oras.land/docs/client_libraries/overview (fetched 2026-08-29T10:14:41.221439+00:00, sha bf47537e076a)
- Data as of 2026-08-30T08:39:29.467469+00:00.