Skip to content

Advanced Topics

This section covers advanced features and use cases for AAM power users and organizations.

Topics

HTTP Registry

Learn how to set up and run your own HTTP registry server for centralized package management with authentication, package signing verification, and download statistics.

Package Signing

Understand AAM's package signing system using Sigstore for identity-based signing and GPG for traditional cryptographic signatures.

Dist-Tags

Use distribution tags to create named aliases for package versions (latest, stable, bank-approved, etc.) for controlled deployments and organizational gates.

Scoped Packages

Organize your packages with namespaces using scoped package names (@author/package-name) for better organization and ownership management.

Quality & Evals

Add automated tests and evaluations to your packages to measure and publish quality metrics for consumers.

Hosting a Registry

Deploy and operate an AAM HTTP registry in production, including infrastructure recommendations, scaling considerations, and maintenance procedures.

Who Should Read This?

You should explore advanced topics if you:

  • Run a team or organization using AAM
  • Want to host a private registry
  • Need package signing and verification
  • Require governance controls (approvals, gates)
  • Want to publish quality metrics with your packages
  • Need to understand AAM's security model in depth

Prerequisites

Before diving into advanced topics, you should be comfortable with:

  • Basic AAM commands (install, publish, search)
  • Creating and publishing packages
  • Understanding manifests (aam.yaml)
  • Platform deployment concepts

For Teams

For Security-Focused Users

For Package Authors

Additional Resources