Brad Wood

December 23, 2017

Spread the word

Share your thoughts

For today's 12 Tips of (CommandBox) Christmas blog, we're covering private ForgeBox packages.  This has been out for a while but we haven't talked a great deal about it.  The idea of private packages is that you want to have packages of code that you and your coworkers use to build your apps and you want to use ForgeBox to list them so you can have CommandBox manage their installation and updating versions.  However, these are internal packages that you don't to share with the rest of the world.  

How do they work?

Private packages work the same as public packages for the most part.  They have a unique slug, version, and download location and you can install them from CommandBox.  The only difference is they are associated with your user so no one else can see them or install them.  Two things must also happen in the box.json:

  1. The "private" property needs to be set to "true"
  2. The "slug" property must be prefixed with your ForgeBox username like @username/my-package

Part of the reason for the prefix on the slug is that it ensures that your package is unique.  Every Forgebox user could have a private package named "my-package" but they wouldn't be ambiguous since their slugs would all the different due to the username.

How do I create one?

Firstly, ensure you are logged into the CLI with your ForgeBox account.

forgebox whoami
forgebox login

If you don't have an account, sign up for free now.

forgebox register

Now, use the init command in a folder to turn it into a package.

init private=true slug=foobar

With my username being "bdw429s", I get these properties in my new box.json file (among others).


Now I publish my package like normal:

bump --major

Installing them

When installing a private package, make sure to use the full slug that contains the username.

install @bdw429s/foobar


We are very close to releasing automatic S3 storage for packages, but until that comes out, you'll still need to point the location property of your box.json to a location that CommandBox can resolve.  This can be an internal HTTP URL, a network drive path for your organization, or a private Git repo.

Get it while you can

Private ForgeBox packages are free for a limited time while we let people test them out and experiment.  They will eventually become a paid service for ForgeBox users, so play with them for free while you can!  Also coming down the line is ForgeBox Enterprise, which will allow your company to have their own completely internal ForgeBox appliance that you can deploy behind your firewall if you want to use a modern build process, but aren't allowed to connect to external cloud resources for security reasons.  

Add Your Comment

Recent Entries

Using CommandBox Docker Images to Perform Bytecode Source Conversions

Using CommandBox Docker Images to Perform Bytecode Source Conversions

There are times when code needs to be shipped in a compiled state. It might be for obfuscation or source protection, it might just because it runs faster that way, without the CFML server needing to compile templates at runtime. It's an excellent use case for production Docker images and code deploy pipelines.

Jon Clausen
Jon Clausen
October 03, 2022
cbElasticsearch 2.3.3 Released

cbElasticsearch 2.3.3 Released

We are pleased to announce the release of cbElasticsearch version 2.3.4. cbElasticsearch is the Elasticsearch module for the Coldbox platform, and provides a fluent CFML API for interacting with, searching, and serializing to Elasticsearch servers.

This release adds full compatibility for Elasticsearch v8.x as well as maintaining support for Elasticsearch versions 6 and 7.

Jon Clausen
Jon Clausen
October 03, 2022
Ortus Will be at Adobe CF Summit 2022!

Ortus Will be at Adobe CF Summit 2022!

4 of our Ortusians will be speaking at CF Summit this year from Oct 3 - 4 in Las Vegas, Nevada. Here are all the details you need to join us and enjoy valuable CFML content to modernize your projects! We are sponsoring the event and will have a booth for you to come by and have a chat with our team!

Maria Jose Herrera
Maria Jose Herrera
September 27, 2022