{"id":37215604,"url":"https://github.com/madjlzz/gopypi","last_synced_at":"2026-01-15T00:55:59.247Z","repository":{"id":48209024,"uuid":"297734807","full_name":"MadJlzz/gopypi","owner":"MadJlzz","description":"Implementation of a PyPi server in Golang.","archived":true,"fork":false,"pushed_at":"2021-09-25T21:14:45.000Z","size":193,"stargazers_count":3,"open_issues_count":0,"forks_count":1,"subscribers_count":2,"default_branch":"main","last_synced_at":"2024-06-21T01:56:28.057Z","etag":null,"topics":["golang","package-management","pip","pypi"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"gpl-3.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/MadJlzz.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2020-09-22T18:18:27.000Z","updated_at":"2023-01-28T06:19:54.000Z","dependencies_parsed_at":"2022-08-28T10:21:50.431Z","dependency_job_id":null,"html_url":"https://github.com/MadJlzz/gopypi","commit_stats":null,"previous_names":[],"tags_count":2,"template":false,"template_full_name":null,"purl":"pkg:github/MadJlzz/gopypi","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/MadJlzz%2Fgopypi","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/MadJlzz%2Fgopypi/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/MadJlzz%2Fgopypi/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/MadJlzz%2Fgopypi/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/MadJlzz","download_url":"https://codeload.github.com/MadJlzz/gopypi/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/MadJlzz%2Fgopypi/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":28440938,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-01-15T00:55:22.719Z","status":"ssl_error","status_checked_at":"2026-01-15T00:55:20.945Z","response_time":107,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["golang","package-management","pip","pypi"],"created_at":"2026-01-15T00:55:58.642Z","updated_at":"2026-01-15T00:55:59.239Z","avatar_url":"https://github.com/MadJlzz.png","language":"Go","funding_links":[],"categories":[],"sub_categories":[],"readme":"[![Go Report Card](https://goreportcard.com/badge/github.com/MadJlzz/gopypi)](https://goreportcard.com/report/github.com/MadJlzz/gopypi)\n[![Release](https://img.shields.io/github/release/MadJlzz/gopypi.svg?style=flat-square)](https://github.com/MadJlzz/gopypi/releases/latest)\n\n# gopypi\n\ngopypi is partial implementation of the [PEP 503](https://www.python.org/dev/peps/pep-0503/) also known as\nthe `Simple Repository API`.\n\nEverybody knows `PyPi` ([The Python Package Index](https://pypi.org/)) when it comes to retrieve Python dependencies and\nsince I needed to store **private packages**, I decided to make my own implementation with Golang.\n\n# Why has this repository been archived?\n\nThis repository was first introduced because GCP was missing a place to store Python package. They added this functionnality recently (https://cloud.google.com/artifact-registry/docs/python/quickstart) and I don't think `gopypi` has still a meaning atm. (also the fact that it supports only GCS as a backend...)\n\n## Installation\n\n### Google Cloud Platform\n\n#### App Engine\n\nAt the moment, `gopypi` has been tested and deployed only within Google App Engine. It is handy as it comes with several\nfeatures like autoscaling or even TLS termination.\n\nTo deploy `gopypi` in App Engine, just update the `app.yaml` with the correct\n`API_KEY` that you've generated. You can use this snippet to generate easily a token:\n\n```go\npackage main\n\nimport (\n\t\"crypto/rand\"\n\t\"encoding/base64\"\n\t\"fmt\"\n)\n\nfunc main() {\n\t// Pure bytes generated key.\n\tb := make([]byte, 32)\n\t_, _ = rand.Read(b)\n\tfmt.Printf(\"%x\\n\", b)\n\t// If you prefer the base64 encoded version.\n\ts := base64.StdEncoding.EncodeToString(b)\n\tfmt.Printf(\"%s\", s)\n}\n```\n\nOnce you've update the `API_KEY` environment variable, use `gcloud` to deploy:\n\n```bash\ngcloud app deploy app.yaml\n```\n\n#### Secret Manager\n\n`gopypi` needs a private key to sign URLs of packages stored in GCS to let `pip` download them.\n\nTo let the app retrieve this private key, you will need to create it first from the `service account` that runs the\nAppEngine service.\n\nThen, go to the `secret manager` and create a new key called `gopypi-sa-private-key`. Store the JSON service account\nfile there.\n\nDon't forget to add a permission for the service account that runs `gopypi` to be able to retrieve secrets.\n(`secretmanager.secrets.get`: Secret Manager Viewer `roles/secretmanager.viewer`)\n\nYou can change the name of the secret to use by changing the secret name of the `configs/gcp.yaml` file.\n\n#### Cloud Storage\n\n`gopypi` leverages GCS to store and serve packages.\n\nCreate a bucket with the name `gopypi` or the one of you choice. (check `configs/gcp.yaml` and update the bucket value!)\n\nLike for retrieving the secrets, the `service account` running `gopypi` will need permissions. Go to the newly create\nbucket and add `storage.buckets.get` for the `sa`.\n\nThat's it you should be good to go!\n\nYou can choose the directory structure of your choice for packages as long as you keep the root with packages name. (\ne.g. `pydantic/...` or `pydantic/1.8.2/...`)\n\n### Download a package\n\nJust use `pip` as you'd expect to:\n\n```bash\npip install --extra-index-url https://\u003cgenerated_token\u003e:\u003cgopypi server\u003e/simple/ \u003cprivate_package\u003e\n```\n\n:warning: **If you're package has the same name with one in pypi.org**: Order your indexes in a pip configuration file\nto search first in your private registry.\n\n## Contributing\n\nPull requests are always welcome. Don't hesitate to open an issue for questions or changes.\n\n## License\n\nThis project is under license [GNU GPL V3](LICENSE).\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fmadjlzz%2Fgopypi","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fmadjlzz%2Fgopypi","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fmadjlzz%2Fgopypi/lists"}