# JSR vs Poetry

**Leader by Vioscale score:** Poetry

| Attribute | JSR | Poetry |
|---|---|---|
| **Vioscale score** | 47 (46% (low)) | 58.4 (79% (high)) |
| activity.commits_last_30d | 48 | 8 |
| adoption.dependent_repos | 0 | 1,968 |
| adoption.github_stars | 2,969 | 34,293 |
| adoption.package_downloads_weekly | - | 15,796,363 |
| deployment.options | `{"cloud":true,"self_hosted":true}` | `{"self_hosted":true}` |
| description.long | An open-source package registry for JavaScript and TypeScript that publishes ECMAScript modules natively. It works across multiple JavaScript runtimes including Node.js, Deno, Bun, and Cloudflare Workers, with built-in TypeScript support, automatic documentation generation, and interoperability with npm packages. | A command-line tool that manages Python project dependencies, enforces consistent builds across environments, packages code for distribution, and handles publication to package registries. It includes intelligent conflict resolution for dependencies and creates isolated virtual environments. |
| features.capabilities | `{"role":"public_registry","ecosystem":"polyglot","deployment":"saas","open_source":"oss","pricing_model":"free","package_formats":"single","private_packages":true,"supply_chain_integrity":true}` | `{"role":"manager_client","ecosystem":"python","deployment":"cli_local","open_source":"oss","pricing_model":"free","package_formats":"multi","private_packages":true,"lockfile_deterministic":true}` |
| integrations.count | 6 | 1 |
| integrations.list | `[{"name":"Node.js"},{"name":"Deno"},{"name":"Bun"},{"name":"Cloudflare Workers"},{"name":"npm"},{"name":"Algolia"}]` | `[{"name":"PyPI"}]` |
| language.primary | Rust | Python |
| license.spdx | MIT | MIT |
| market.availability | `{"primaryMarkets":[],"availabilityScope":"global","availableCountries":[],"notAvailableCountries":[]}` | - |
| platform.support | `{"cli":true,"web":true}` | `{"cli":true}` |
| pricing | `{"type":"free","plans":[{"free":true,"name":"Public","features":["Publish packages","ECMAScript modules","Automatic API documentation","TypeScript support","Cross-runtime compatibility"],"description":"Free public package registry","contactSales":false}],"summary":"Free and open-source","freeTier":true,"sourceUrl":"https://jsr.io","retrievedAt":"2026-08-14T08:31:11.032Z"}` | `{"type":"free","sourceUrl":"https://python-poetry.org","retrievedAt":"2026-08-14T08:32:09.718Z"}` |
| pricing.free_tier | yes | yes |
| pricing.model | commercial | commercial |
| pricing.price_level | free | free |
| pricing.transparent | yes | yes |
| release.cadence_days | - | 34 |
| release.history | - | `[{"url":"https://github.com/python-poetry/poetry/releases/tag/2.4.1","date":"2026-05-09T15:17:39Z","type":"stable","version":"2.4.1"},{"url":"https://github.com/python-poetry/poetry/releases/tag/2.4.0","date":"2026-05-03T15:04:59Z","type":"stable","version":"2.4.0"},{"url":"https://github.com/python-poetry/poetry/releases/tag/2.3.4","date":"2026-04-12T15:14:53Z","type":"stable","version":"2.3.4"},{"url":"https://github.com/python-poetry/poetry/releases/tag/2.3.3","date":"2026-03-29T12:23:09Z","type":"stable","version":"2.3.3"},{"url":"https://github.com/python-poetry/poetry/releases/tag/2.3.2","date":"2026-02-01T15:39:36Z","type":"stable","version":"2.3.2"},{"url":"https://github.com/python-poetry/poetry/releases/tag/2.3.1","date":"2026-01-20T14:51:42Z","type":"stable","version":"2.3.1"},{"url":"https://github.com/python-poetry/poetry/releases/tag/2.3.0","date":"2026-01-18T13:44:52Z","type":"stable","version":"2.3.0"},{"url":"https://github.com/python-poetry/poetry/releases/tag/2.2.1","date":"2025-09-21T14:50:15Z","type":"stable","version":"2.2.1"},{"url":"https://github.com/python-poetry/poetry/releases/tag/2.2.0","date":"2025-09-14T11:43:56Z","type":"stable","version":"2.2.0"},{"url":"https://github.com/python-poetry/poetry/releases/tag/2.1.4","date":"2025-08-05T03:52:52Z","type":"stable","version":"2.1.4"},{"url":"https://github.com/python-poetry/poetry/releases/tag/2.1.3","date":"2025-05-04T13:37:05Z","type":"stable","version":"2.1.3"},{"url":"https://github.com/python-poetry/poetry/releases/tag/2.1.2","date":"2025-03-29T21:38:44Z","type":"stable","version":"2.1.2"},{"url":"https://github.com/python-poetry/poetry/releases/tag/2.1.1","date":"2025-02-16T21:04:55Z","type":"stable","version":"2.1.1"},{"url":"https://github.com/python-poetry/poetry/releases/tag/2.1.0","date":"2025-02-15T14:07:10Z","type":"stable","version":"2.1.0"},{"url":"https://github.com/python-poetry/poetry/releases/tag/2.0.1","date":"2025-01-12T05:10:10Z","type":"stable","version":"2.0.1"},{"url":"https://github.com/python-poetry/poetry/releases/tag/2.0.0","date":"2025-01-05T11:53:49Z","type":"stable","version":"2.0.0"},{"url":"https://github.com/python-poetry/poetry/releases/tag/1.8.5","date":"2024-12-06T16:29:16Z","type":"stable","version":"1.8.5"},{"url":"https://github.com/python-poetry/poetry/releases/tag/1.8.4","date":"2024-10-14T15:43:01Z","type":"stable","version":"1.8.4"},{"url":"https://github.com/python-poetry/poetry/releases/tag/1.8.3","date":"2024-05-08T13:45:03Z","type":"stable","version":"1.8.3"},{"url":"https://github.com/python-poetry/poetry/releases/tag/1.8.2","date":"2024-03-02T15:26:36Z","type":"stable","version":"1.8.2"}]` |
| security.scorecard | 5.4 | 3 |
| security.vulnerabilities | `{"count":0,"source":"https://advisories.ecosyste.ms/api/v1/advisories?ecosystem=go&package_name=github.com%2Fjsr-io%2Fjsr&per_page=100","last_12m":0,"max_severity":null}` | `{"count":5,"source":"https://advisories.ecosyste.ms/api/v1/advisories?ecosystem=pypi&package_name=poetry&per_page=100","last_12m":2,"max_severity":"CRITICAL"}` |

## Capabilities (Package Registries)

| Capability | JSR | Poetry |
|---|:--:|:--:|
| **Core** |  |  |
| Role | Public registry | Package manager client |
| **Ecosystem** |  |  |
| Ecosystem / language | Polyglot | Python |
| **Deployment** |  |  |
| Deployment | SaaS | CLI-local |
| **Formats** |  |  |
| Package formats supported | Single ecosystem | Many formats |
| **Hosting** |  |  |
| Private / scoped packages | ✓ | ✓ |
| Upstream proxy / caching | - | - |
| **Resolution** |  |  |
| Lockfile / deterministic installs | - | ✓ |
| Workspaces / monorepo | - | - |
| Content-addressable store | - | - |
| **Supply chain** |  |  |
| Supply-chain integrity | ✓ | - |
| Vulnerability / licence scanning | - | - |
| **Licensing** |  |  |
| Openness | Open-source | Open-source |
| **Pricing** |  |  |
| Pricing model | Free / OSS | Free / OSS |

*Source: Vioscale. Generated 2026-09-01T17:04:12.244Z. "-" = undocumented, not absent.*