pypiserver

Overview

pypiserver is a self-hosted index for distributing Python packages through familiar tools such as pip and easy_install. It best suits developers and small teams who want to serve their own packages from ordinary directories. Its narrow scope makes it a practical fit for a focused Python index, but not a full-featured package repository.

Key features

The server scans package directories recursively and serves wheels, bdists, eggs, and accompanying PGP signatures. Because packages stay in regular directories, teams can use an existing file-based setup rather than adopting a larger repository system. Standard Python clients, including pip and twine, can use it as a package index.

Publishing options include pip, setuptools, twine, pypi-uploader, and copying files with scp. That range accommodates both automated publishing and direct file transfers. Upload protection can use an Apache htpasswd file; API users can also configure custom authentication callables. The maintainers strongly advise protecting uploads with a password, which is essential to account for when serving private packages.

pypiserver provides a WSGI application and documents deployment with Docker, nginx, Apache, gunicorn, Paste, and other WSGI servers. Official Docker images are built for main pushes and development, prerelease, and final releases. A default /health endpoint returns HTTP 200 when the service is up, and can be configured for deployment needs. For HTTPS, the documentation recommends placing the server behind a reverse proxy.

The API covers the needs of pip installation, easy_install, and package search, not the full PyPI API. It accepts documentation uploads but does not save them to disk. These limits are manageable for straightforward package distribution, but may rule it out when clients or workflows rely on broader PyPI functionality or stored documentation.

Pricing

pypiserver is open-source software with a free plan at no cost. There is no paid tier to weigh against the self-hosting work: teams supply and operate the environment themselves. The remaining code uses the zlib/libpng license, and its bundled Bottle copy is MIT-licensed.

Platforms

It supports Linux, macOS, and Windows, as well as self-hosted deployment and an API. The project includes systemd service instructions for Linux and Windows service instructions using NSSM. Current releases work with Python 3.10+ and PyPy3; older Python versions are untested and unsupported by the current series.

Who it's for

Choose pypiserver when you need a modest, self-managed home for Python packages and value ordinary directory storage and familiar publishing tools. Its narrow PyPI interface and basic upload protection suit focused internal or personal indexes. Look elsewhere if you need a full PyPI API, stored documentation, or a broader artifact repository.

Pros and cons

• Pro: Several upload routes, including common Python tools and scp, let teams fit publishing into existing workflows.
• Pro: Directory-backed storage keeps package organization straightforward and serves multiple common Python package formats.
• Pro: Docker images, WSGI deployment options, and a health endpoint support varied self-hosted operations.
• Con: The server scans the package directory on each request by default; collections numbering in the thousands can slow service, though directory caching can improve performance.
• Con: The API is intentionally partial, and uploaded documentation is not retained on disk.
• Con: Upload security and HTTPS require deployment choices, including password protection and a reverse proxy for HTTPS.

Alternatives

For a public registry aimed at JavaScript packages, consider npm, whose free plan includes unlimited public packages and public registry access. If you want private package and Docker feeds with broader security and compliance features, consider Inedo ProGet; its free edition offers unlimited feeds but has limited security and compliance features.

For other language-specific package ecosystems, LuaRocks, Bioconductor, and CPAN are alternatives. For a public publishing platform that requires a GitHub account to publish a packages.json registry, consider R-universe. For a CLI tool with an HTTP REST service, consider aptly. For an iOS and macOS package manager, consider CocoaPods.

Browse Package Registries and Artifact repository software for more options.

Verdict

pypiserver is a sensible choice for individuals and teams who want a free, self-hosted Python index with direct directory storage and multiple upload paths. Its main appeal is keeping package distribution focused and compatible with standard Python tools. Choose another service if you need the full PyPI API, retained documentation uploads, or a package collection large enough to make default request-time scanning a concern.