pypi/warehouse

Features

• Python Package Indexing - Provides a searchable repository of Python libraries with version tracking and category-based filtering.
• Package Registries - Functions as a high-availability centralized storage system for hosting and distributing software packages via a standardized API.
• Software Package Repositories - Provides a centralized source for storing versioned distribution files and a searchable index for downloads.
• Distribution and Packaging - Stores and distributes package files via a web application optimized for various file sizes and request timeouts.
• Package Index Hosting - Provides a central repository where clients can discover and download specific versions of software libraries.
• Python Package Index Implementations - Serves as a central repository and web application for hosting, discovering, and distributing Python software packages.
• PyPI Compatible Servers - Implements a server that follows Python Package Index standards for package uploads and retrieval.
• Resource-Level Access Controls - Matches user credentials against access control lists to determine rights for specific resources.
• Package Ownership Management - Implements role-based access control to manage project ownership and release metadata in a multi-tenant environment.
• Multi-Method API Authentication - Evaluates multiple security policies to resolve identity via sessions, basic auth, or tokens.
• Package Distribution Security - Implements digital signature verification for package attestations and secure access control to protect the software supply chain.
• Authentication Chains - Evaluates a sequence of identity providers and security policies to resolve user identity via sessions, tokens, or basic auth.
• Role-Based Access Control - Matches user credentials against access control lists to manage permissions for package ownership and maintainer roles.
• Package Role Identification - Identifies whether a user is an owner or maintainer for specific packages.
• User Identity Management - Manages user profiles and links accounts to third-party identity providers through a flexible authentication system.
• Package Attestation Verifiers - Validates the authenticity of software distributions by checking digital signatures and certificates.
• Classifier-Based Filtering - Returns lists of package names and versions that match specific category classifiers.
• Asynchronous Task Processing - Offloads heavy computations and email delivery to background workers using a distributed queue to maintain web responsiveness.
• Token Revocation - Identifies valid tokens within reported secret disclosures and revokes them to prevent unauthorized access.
• Token Validity Constraints - Verifies token scopes and caveats to enforce project, temporal, or contextual restrictions.
• Route-Based Access Restrictions - Limits valid authentication mechanisms based on URL patterns to separate API and UI access.
• Multi-Factor Authentication - Enforces secondary authentication steps to block sensitive actions for enhanced account security.
• Identity Linking - Connects user profiles to third party identity services using secure protocols to verify account holders.
• Distributed Task Queues - Offloads heavy computations and email delivery to asynchronous background workers using distributed task queues.
• Frontend UI Localization - Translates interface strings into multiple languages by generating locale-specific asset bundles during the build process.
• Account Status Checks - Validates user records to ensure accounts are not frozen, disabled, or deleted regardless of session status.
• Background Job Schedulers - Executes asynchronous jobs and scheduled work using a distributed queue to offload heavy computations.
• Interface Translation Systems - Marks text strings in code and templates for translation and pluralization to support a multi-language interface.
• Package Distribution - Powers the official Python Package Index.

Star history