Private PHP packages get a proper Composer v2 registry on your own server, with a dashboard in place of the rebuild script. Point Pricore at GitHub, GitLab, Bitbucket, Gitea, Forgejo, Gogs, or any Git server over SSH or HTTPS, and it reads each composer.json, indexes every tag and branch, and serves the versions to Composer. Webhooks pick up a new tag within seconds, and monorepo support turns a packages/* directory into several packages whose versions follow the repository's tags. Registry mirrors import packages from Satis and other Composer registries, including commercial ones behind HTTP Basic or Bearer authentication, with optional dist archives. Packagist advisories feed automatic security audits, so vulnerable versions appear in the dashboard and composer audit works against the registry. Scoped tokens separate install-only access for CI from publish and API permissions for administrators, and every request is also checked against the member's role. The dashboard shows repository sync health, vulnerabilities by severity, download trends, an activity feed, and a package page with versions, advisories, and install commands. A versioned REST API with OpenAPI 3.1 documentation scripts the same actions, and a built-in MCP server lets Claude, Cursor, or VS Code search packages and check advisories after a one-time browser sign-in. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.