Maestrino
Sell and install Composer packages
Sell and install Composer packages
from private GitHub repositories.
Vendors connect their private GitHub repositories. Buyers install purchased packages through our private Composer registry — no GitHub access sharing required.
How it works
Three audiences, one tight loop
Vendors connect repositories. The platform ingests versions, builds artifacts, and serves a Composer-compatible registry. Buyers install purchased packages with one command.
For vendors
Monetize private packages
Connect private repositories, control versioning, and sell access without exposing source.
For buyers
One-line composer install
Buy a package, generate a token, composer require it.
For your team
Auditable access
Tokens are scoped, revocable, and never shown twice. Every sensitive action is audit logged.
Install
No GitHub access sharing. Ever.
1. Add the registry
composer config repositories.maestrino composer https://maestrino.org
2. Authenticate and install
composer config http-basic.maestrino.org token_xxx "" composer require acme/widgets
Token issuance lands in Milestone 6. Commands above are illustrative.