PyPI
PyPI is a repository for software written in Python.
What PyPI is
PyPI is a repository for software written in Python. It helps people find and install packages shared by the Python community, while authors use it to distribute their work. A release can include several files, such as source archives and binary wheels for different hardware, operating systems, and formats. PyPI is available on the web and through APIs, including RSS feeds for new packages and releases. Accounts require two-factor authentication, and authors need a verified email address to register projects or upload releases. Organizations provide shared profiles, teams, publishing and maintenance permissions, trusted publishing, and organization history. The free Community organization requires no payment details; the Company organization costs $5 a month, billed monthly by card through Stripe. PyPI sets default limits of 100 MB per file and 10 GB per project, and does not support private packages. It is maintained by the Python Software Foundation and Python community.
Good
- Free Community organization needs no billing information.
- APIs include RSS feeds for new packages and releases.
- Organizations support teams and publishing permissions.
- Trusted Publishing uses short-lived identity tokens.
Watch out
- Private packages are not supported.
- Individual files are limited to 100 MB by default.
- Project storage is limited to 10 GB by default.
- Company organization costs $5 a month.
Who it suits
PyPI suits Python developers looking to find or install community packages, and authors who need to publish them. Organizations can use its shared profiles and team permissions.
Verdict
PyPI brings package discovery and publishing together for the Python community, with APIs and organization features alongside account security requirements. Check the file and project limits and the lack of private packages before choosing it for a project.
Plans and prices
From PyPI's own pricing page, checked 15 Oct 2026.
| Plan | Price | What it gives you |
|---|---|---|
| Community Organization | Free | All current organization features · qualifying community projects · application review · No payment or billing information required |
| Company organization | $5 a month | All current organization features · Applications reviewed by PyPI team · Billed monthly by card through Stripe |
| Corporate Organization | $5 a month | $5 per member User · organization features · application review · Invoiced monthly based on usage; due upon receipt |
The facts
Each one read from PyPI's own pages, with the date it was checked.
What it does
- Account security
- Two-factor authentication is required on PyPI accounts.checked 1 Oct 2026
- API
- PyPI provides JSON, Index, Upload, Integrity, Stats, RSS, secret-reporting, and public dataset interfaces.checked 15 Oct 2026
- API access
- PyPI provides APIs, including RSS feeds for new packages and releases.checked 1 Oct 2026
- API limitation
- New integrations are advised to avoid XML-RPC because PyPI plans to deprecate those APIs.checked 15 Oct 2026
- API policy
- JSON, RSS, and Index API responses are cached and expose ETag headers for conditional requests.checked 15 Oct 2026
- Attestations
- PyPI accepts SLSA Provenance and PyPI Publish attestation predicates and supports up to two attestations per uploaded release file.checked 1 Oct 2026
- Authentication
- PyPI requires two-factor authentication for web login and supports TOTP applications, WebAuthn security devices, and recovery codes.checked 15 Oct 2026
- Community role
- The Python Software Foundation hosts PyPI, the Python package repository relied on by thousands of users and a huge range of projects.checked 1 Oct 2026
- Current status
- The official status page reports no incident on October 15, 2026 and shows PyPI systems operational.checked 15 Oct 2026
- Documentation depth
- The official documentation covers project management, organizations, trusted publishers, attestations, APIs, datasets, metadata, storage, yanking, and support topics.checked 15 Oct 2026
- Installation
- The Python Packaging User Guide documents installing PyPI packages with Python and pip on Unix/macOS and Windows.checked 15 Oct 2026
- Licence
- Warehouse, the software powering PyPI, is published under the Apache-2.0 licence.checked 15 Oct 2026
- Limit: moderation capacity
- CSO reported that PyPI had more than 625,000 packages and only four full-time administrators, with one person serving as the sole security specialist at the time described.checked 15 Oct 2026
- Limit: supply-chain exposure
- Security research found 4,655 analyzed PyPI packages explicitly required at least one known-vulnerable dependency and 141,044 allowed vulnerable versions through dependency ranges.checked 15 Oct 2026
- Limit: typosquatting
- A documented campaign registered about 900 malicious typosquatted packages targeting 40 popular Python packages and delivered cryptocurrency-stealing malware.checked 15 Oct 2026
- Maintainer
- PyPI is developed and maintained by the Python Software Foundation and the Python community.checked 1 Oct 2026
- Mirroring
- The recommended project for running a PyPI mirror is bandersnatch, and storage requirements exceed 1 terabyte and are growing.checked 1 Oct 2026
- Mirrors
- PyPI recommends bandersnatch for operating a mirror and warns that a mirror needs more than one terabyte of storage and growing.checked 15 Oct 2026
- Nonprofit status
- The Python Software Foundation describes itself as a 501(c)(3) nonprofit organization.checked 15 Oct 2026
The company
- Company headquarters
- LinkedIn lists the Python Software Foundation headquarters in Beaverton, Oregon.checked 15 Oct 2026
- Company legal name
- Crunchbase lists the legal name as Python Software Foundation Inc.checked 15 Oct 2026
- Company size
- LinkedIn lists the foundation's company size as 2–10 employees, while its public page shows 843 associated employee profiles.checked 15 Oct 2026
- Founded
- LinkedIn lists the Python Software Foundation as founded in 2001.checked 15 Oct 2026
- Maker
- PyPI is developed and maintained by the Python Software Foundation and the Python community.checked 15 Oct 2026
Alternatives to PyPI
- 1
Bioconductor
Free planOpen sourceWebLinuxmacOSSelf-hosted7.6Free plan - 2
npm
Free planLinuxmacOSWindows7.5From $7 a month - 3
Inedo ProGet
Free planWebAPILinuxSelf-hosted7.4From $2,395 a year - 4
GNU ELPA
Free planOpen sourceWebSelf-hosted7.0Free plan - 5
LuaRocks
Free planAPILinuxmacOSSelf-hosted6.9Free plan - 6
pypiserver
Free planAPILinuxmacOSSelf-hosted6.9Free plan