PackagePass

Legal

Terms of Service

These Terms govern access to PackagePass, including the hosted registry, dashboard, API, CLI, SDKs, billing, support, and documentation.

Effective date

May 5, 2026

Provider

Sedrino Labs, Inc.

Kentucky, United States

The agreement for using PackagePass private package distribution, registry access, dashboard, API, and related services.

1. Agreement

These Terms of Service are an agreement between you and Sedrino Labs, Inc. PackagePass is a product of Sedrino Labs, Inc., a Delaware corporation operating from Kentucky. By creating an account, using the service, accepting an order form, or accessing a PackagePass registry, you agree to these Terms on behalf of yourself and, if applicable, the organization you represent.

If you use PackagePass for an organization, you confirm that you have authority to bind that organization to these Terms.

2. The service

PackagePass provides private npm-compatible package distribution for TypeScript packages, customer SDKs, generated libraries, preview packages, and internal modules. The service includes registry endpoints, package storage, access grants, automation tokens, audit logs, dashboard workflows, API access, CLI tooling, SDKs, and related support.

We may improve, modify, or discontinue features over time. We will not materially reduce paid plan functionality during a paid subscription term without providing a reasonable replacement, workaround, or account credit where appropriate.

3. Accounts and organizations

You are responsible for account activity, organization membership, role assignment, package access grants, automation tokens, and credentials used with PackagePass. Keep credentials confidential and notify us promptly if you believe an account, token, or registry credential has been compromised.

You must provide accurate account, organization, billing, and contact information and keep it current.

4. Customer content

Customer content includes package metadata, package tarballs, generated libraries, source-related artifacts you upload, organization records, grants, groups, users, agents, tokens, audit events, and configuration data submitted to PackagePass.

You retain ownership of customer content. You grant Sedrino Labs, Inc. the limited rights needed to host, store, secure, transmit, process, reproduce, and display customer content to provide and improve the service, comply with law, prevent abuse, and support your use of PackagePass.

5. Package distribution responsibility

You are responsible for packages and code you publish or distribute through PackagePass, including licensing, export controls, third-party rights, security review, dependency disclosure, vulnerability response, and downstream customer commitments.

PackagePass does not review package contents for legal compliance, security, malware, secrets, or intellectual property issues unless we separately agree in writing.

6. Acceptable use

You must comply with the Acceptable Use Policy. We may suspend or limit access if we reasonably believe use of PackagePass creates security risk, violates law, harms the service, infringes rights, or breaches these Terms.

7. Billing and plan limits

Paid plans, usage limits, renewals, taxes, and payment terms are shown on the pricing page, checkout flow, invoice, order form, or other written agreement. Unless stated otherwise, fees are non-refundable except where required by law or expressly stated in a written agreement.

PackagePass may enforce package, pull, token, storage, audit retention, and other plan limits. We may update pricing or plan packaging for future terms by providing notice before the change applies.

8. Third-party services

Sedrino Labs, Inc. may rely on third-party providers for authentication, billing, hosting, analytics, email, storage, and infrastructure. Your use of those connected features may be subject to provider terms and provider processing of data.

You are responsible for configuring integrations and credentials securely.

9. Confidentiality

Each party may receive non-public information from the other party. The receiving party will use reasonable care to protect confidential information and will use it only to perform obligations or exercise rights under these Terms.

Confidential information does not include information that is publicly available without breach, already known without restriction, independently developed, or lawfully received from another source.

10. Security

We maintain administrative, technical, and organizational safeguards designed to protect the service. No system is perfectly secure. You are responsible for secure use of accounts, package publishing workflows, CI secrets, local development environments, and tokens.

Security issues should be reported through the contact channel listed on the Security page.

11. Beta and free features

Free, trial, preview, beta, or experimental features may be provided with limited support, limited availability, and additional limits. They may be changed or discontinued at any time.

12. Termination

You may stop using PackagePass at any time. We may suspend or terminate access for non-payment, breach, security risk, legal risk, abuse, or discontinued service. On termination, you remain responsible for unpaid fees and for exporting customer content before access ends.

Sections that by their nature should survive termination will survive, including payment obligations, confidentiality, disclaimers, limits of liability, dispute terms, and ownership provisions.

13. Disclaimers

PackagePass is provided as is and as available. To the fullest extent permitted by law, we disclaim implied warranties, including warranties of merchantability, fitness for a particular purpose, title, and non-infringement.

We do not warrant that the service will be uninterrupted, error-free, or meet every security, compliance, procurement, or customer distribution requirement.

14. Limitation of liability

To the fullest extent permitted by law, neither party will be liable for indirect, incidental, special, consequential, exemplary, or punitive damages, or for lost profits, revenue, goodwill, data, or business interruption.

Except for amounts owed, confidentiality breaches, misuse of intellectual property, or liability that cannot legally be limited, each party's aggregate liability under these Terms is limited to the amount paid or payable for the service in the twelve months before the event giving rise to liability.

15. Governing law

These Terms are governed by the laws of the State of Delaware and applicable United States federal law, without regard to conflict-of-law rules. Courts located in Delaware will have exclusive jurisdiction unless an order form states otherwise.

16. Changes

We may update these Terms by posting a revised version and changing the effective date. Material changes will apply prospectively, and we will provide reasonable notice when required.

Contact

Questions, notices, privacy requests, and abuse reports can be sent to michael@sedrino.com.