Python Package Index Reviews and Details

Is Python Package Index good?

Social recommendations and mentions

• 🐍 python pip vs pipenv vs poetry — which one should you actually use?

  Running pip install requests triggers this sequence: 1. Resolve requests to a distribution (wheel or sdist) from the index (default: https://pypi.org). 2. Download the artifact, verify its hash if available, and extract it. 3. Execute the build backend (setuptools, poetry-core, etc.) specified in pyproject.toml or setup.py to generate metadata. 4. Copy files into site-packages/ and populate .dist-info... - Source: dev.to / 2 months ago

• How to write and publish a Python package to PyPI

  You need two accounts: test.pypi.org for the test registry, and pypi.org for the real registry that pip install and uv add use. Use the test registry first, since it resets periodically and will not pollute the real index with test uploads. Enable two-factor authentication on both, as PyPI requires it for publishing. - Source: dev.to / 2 months ago

• Beyond Blocks and Lines: How CadQuery is Revolutionizing Parametric Design

  Install CadQuery: Use pip install cadquery to get started. Refer to the Python Package Index (PyPI) for the latest installation instructions. - Source: dev.to / 3 months ago

• Installing and managing python packages via PIP

  Open your browser and navigate to pypi.org. - Source: dev.to / 5 months ago

• Blog: PyPI in 2025: A Year in Review

  How does the big white search box at https://pypi.org/ work? Why couldn’t the same technology be used to power the CLI? If there’s an issue with abuse, I don’t think many people would mind rate limiting or mandatory authentication before search can be used. - Source: Hacker News / 7 months ago

• Solved: Found a new reason why a company denied all of its applicants

  #!/bin/bash Echo "--- Starting Technical Assessment Environment Sanity Check ---" # 1. Check Python version Echo "Checking Python 3 availability..." PYTHON_VERSION=$(python3 --version 2>&1) If [[ $PYTHON_VERSION == *"Python 3"* ]]; then echo "Python 3 detected: $PYTHON_VERSION" Else echo "ERROR: Python 3 not found or incorrect version. Output: $PYTHON_VERSION" exit 1 Fi # 2. Check internet... - Source: dev.to / 7 months ago

• Shipping 1.0.0: From Local Repo to a Published Python Package

  Python -m venv .venv-test source .venv-test/bin/activate python -m pip install --index-url https://test.pypi.org/simple --extra-index-url https://pypi.org/simple your-package-name python -c "import your_package; print(your_package.__version__)". - Source: dev.to / 8 months ago

• Build, Manage, and Ship Python Projects the Easy Way using Poetry

  You install libraries from PyPI, update them over time, track versions to keep the project stable, and share those versions with your team. You also need to package your project if you want others to use it. - Source: dev.to / 8 months ago

• Packaging and Releasing ContextWeaver for Lab 9

  For my lab, I worked on my repo ContextWeaver and I used Python’s packaging tools and published my project on TestPyPI using build and twine, since Python packages are all managed through PyPI and TestPyPI. The process was pretty detailed. I had to reorganize my code into a proper src/contextweaver structure, create a pyproject.toml with all the metadata, bump versions every time I re-uploaded, build the package... - Source: dev.to / 8 months ago

• The GIL Revealed: Why Python Threading Isn't Really Parallel

  Import threading Import requests Import time Def fetch_url(url): response = requests.get(url) return len(response.content) Urls = [ "https://python.org", "https://github.com", "https://stackoverflow.com", "https://pypi.org", "https://docs.python.org", ] # Single-threaded Start = time.time() For url in urls: fetch_url(url) Single_time = time.time() - start Print(f"Single-threaded:... - Source: dev.to / 9 months ago

• Don’t Let Cyber Risk Kill Your GenAI Vibe: A Developer’s Guide

  This GenAI novel cyber risk is a variant of what's called typo squatting. With typo squatting, a malicious actor published its malware on some public repository (like the Node Package Manager (NPM) for Node JavaScript, the Python Package Index (PyPI) for python, or the Comprehensive R Archive Network (CRAN) for R) using a package name that is so similar to a popular package that a typo in the package name during... - Source: dev.to / 10 months ago

• Some thoughts on personal Git hosting

  > But we still don't have a solution to search projects on potentially thousands of servers, including self-hosted ones. We do. https://mvnrepository.com/repos/central https://npmjs.com https://packagist.org/ https://pypi.org/ https://www.debian.org/distrib/packages#search_packages https://pkg.go.dev/ https://elpa.gnu.org/packages/ And many others. And we still have forums like this one and Reddit where... - Source: Hacker News / 11 months ago

• Configuring CSP: A Test For Django 6.0

  There has been existing tooling to test and enforce CSP in Django. The most recognizable of those has been the django-csp package developed by a team at Mozilla. It is available on PyPI and does an excellent job. You might still be wondering how this answers the question: "Why Django 6.0?" In May 2024, a conversation began to explore the possibility of adding CSP support to Django. The idea was to create... - Source: dev.to / 11 months ago

• PyPI Users Email Phishing Attack

  Ah, I was beaten to it... The Python Package Index (PyPI), a central repository of third-party Python packages, is now seeing what appears to be a fairly wide-scale phishing attack. The attackers are squatting on "pypj.org" — a plausible typo, but more likely chosen to visually resemble "pypi.org" in a browser address bar. This was first reported by Python core developer Ethan Furman (@stoneleaf), who was... - Source: Hacker News / 12 months ago

• Contributing to PyPI

  If you visit PyPI and scroll to the bottom you can see that it is available in a number of languages including Hebrew, which indicates it should also support RTL (Right-to-left) rendering. Those translations need maintenance and more translations could be added. - Source: dev.to / about 1 year ago

• Uv: An extremely fast Python package and project manager, written in Rust

  My apologies: "mydependencies" are packages from PyPI (https://pypi.org/), as if you did "pip install ...". - Source: Hacker News / about 1 year ago

• DeadLock: Research Results & Tech Stack

  After building this project I will have to host this package on Pypi, I saw that it can import the release directly from GitHub through GitHub Actions. - Source: dev.to / about 1 year ago

• Publish a Python Package (part 1)

  Create an account on pypi to publish python package. [https://pypi.org] Now, open your code editor terminal:-. - Source: dev.to / about 1 year ago

• Solving SSL Certificate Verification Issues with pip on macOS

  # Check if Python can connect to pypi.org Python -c "import urllib.request; urllib.request.urlopen('https://pypi.org')" # Test where Python is looking for certificates Python -c "import ssl; print(ssl.get_default_verify_paths())" # Check pip configuration Pip config debug. - Source: dev.to / over 1 year ago

• What I wish I knew about Python when I started

  But let me back up and start from the perspective of a total Python beginner, as that is who this post is intended for. In Python, there are a lot of built-in libraries available to you via the Python Standard Library. This includes packages like datetime which allows you to manipulate dates and times, or like smtplib which allows you to send emails, or like argparse which helps aid development of command line... - Source: dev.to / over 1 year ago

• Python Project Setup With uv – Virtual Environments and Package Management

  Virtual Environments are isolated Python environments that have their own site-packages. Basically, it means that each virtual environment has its own set of dependencies to third-party packages usually installed from PyPI. - Source: dev.to / over 1 year ago