{"id":13483603,"url":"https://github.com/pypa/pip","last_synced_at":"2026-07-11T02:29:08.375Z","repository":{"id":37247006,"uuid":"1446467","full_name":"pypa/pip","owner":"pypa","description":"The Python package installer","archived":false,"fork":false,"pushed_at":"2026-07-08T19:11:37.000Z","size":74909,"stargazers_count":10228,"open_issues_count":1011,"forks_count":3318,"subscribers_count":315,"default_branch":"main","last_synced_at":"2026-07-08T23:28:13.067Z","etag":null,"topics":["packaging","pip","python"],"latest_commit_sha":null,"homepage":"https://pip.pypa.io/","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/pypa.png","metadata":{"files":{"readme":"README.rst","changelog":"NEWS.rst","contributing":".github/CONTRIBUTING.md","funding":".github/FUNDING.yml","license":"LICENSE.txt","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":"AUTHORS.txt","dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null},"funding":{"github":null,"patreon":null,"open_collective":null,"ko_fi":null,"tidelift":null,"community_bridge":null,"liberapay":null,"issuehunt":null,"otechie":null,"custom":"https://pypi.org/sponsor/"}},"created_at":"2011-03-06T14:30:46.000Z","updated_at":"2026-07-08T19:12:06.000Z","dependencies_parsed_at":"2024-11-05T21:35:14.510Z","dependency_job_id":"ccb2d50b-8a59-4de0-ba34-ac6e72379deb","html_url":"https://github.com/pypa/pip","commit_stats":{"total_commits":11049,"total_committers":820,"mean_commits":13.47439024390244,"dds":0.8428817087519233,"last_synced_commit":"420435903ff2fc694d6950a47b896427ecaed78f"},"previous_names":[],"tags_count":163,"template":false,"template_full_name":null,"purl":"pkg:github/pypa/pip","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pypa%2Fpip","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pypa%2Fpip/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pypa%2Fpip/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pypa%2Fpip/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/pypa","download_url":"https://codeload.github.com/pypa/pip/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pypa%2Fpip/sbom","scorecard":{"id":54629,"data":{"date":"2025-08-04","repo":{"name":"github.com/pypa/pip","commit":"b73fc049e47e7c422015d08323d413adceb8435e"},"scorecard":{"version":"v5.2.1-28-gc1d103a9","commit":"c1d103a9bb9f635ec7260bf9aa0699466fa4be0e"},"score":5.9,"checks":[{"name":"Maintained","score":10,"reason":"30 commit(s) and 23 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#maintained"}},{"name":"Security-Policy","score":9,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Warn: One or no descriptive hints of disclosure, vulnerability, and/or timelines in security policy","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#security-policy"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#dangerous-workflow"}},{"name":"Code-Review","score":7,"reason":"Found 5/7 approved changesets -- score normalized to 7","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#code-review"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/ci.yml:1","Warn: no topLevel permission defined: .github/workflows/release.yml:1","Warn: no topLevel permission defined: .github/workflows/update-rtd-redirects.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#token-permissions"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE.txt:0","Info: FSF or OSI recognized license: MIT License: LICENSE.txt:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#license"}},{"name":"CII-Best-Practices","score":2,"reason":"badge detected: InProgress","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#cii-best-practices"}},{"name":"Binary-Artifacts","score":0,"reason":"binaries present in source code","details":["Warn: binary detected: src/pip/_vendor/distlib/t32.exe:1","Warn: binary detected: src/pip/_vendor/distlib/t64-arm.exe:1","Warn: binary detected: src/pip/_vendor/distlib/t64.exe:1","Warn: binary detected: src/pip/_vendor/distlib/w32.exe:1","Warn: binary detected: src/pip/_vendor/distlib/w64-arm.exe:1","Warn: binary detected: src/pip/_vendor/distlib/w64.exe:1","Warn: binary detected: tests/data/backends/dummy_backend-0.1-py2.py3-none-any.whl:1","Warn: binary detected: tests/data/backends/test_backend-0.1-py2.py3-none-any.whl:1","Warn: binary detected: tests/data/packages/brokenwheel-1.0-py2.py3-none-any.whl:1","Warn: binary detected: tests/data/packages/colander-0.9.9-py2.py3-none-any.whl:1","Warn: binary detected: tests/data/packages/compilewheel-1.0-py2.py3-none-any.whl:1","Warn: binary detected: tests/data/packages/complex_dist-0.1-py2.py3-none-any.whl:1","Warn: binary detected: tests/data/packages/console_scripts_uppercase-1.0-py2.py3-none-any.whl:1","Warn: binary detected: tests/data/packages/has.script-1.0-py2.py3-none-any.whl:1","Warn: binary detected: tests/data/packages/invalid_version-1.0-py3-none-any.whl:1","Warn: binary detected: tests/data/packages/invalid_version-2010i-py3-none-any.whl:1","Warn: binary detected: tests/data/packages/license.dist-0.1-py2.py3-none-any.whl:1","Warn: binary detected: tests/data/packages/license.dist-0.2-py2.py3-none-any.whl:1","Warn: binary detected: tests/data/packages/meta-1.0-py2.py3-none-any.whl:1","Warn: binary detected: tests/data/packages/mypy-0.782-py3-none-any.whl:1","Warn: binary detected: tests/data/packages/prjwithdatafile-1.0-py2.py3-none-any.whl:1","Warn: binary detected: tests/data/packages/require_invalid_version-0.1-py3-none-any.whl:1","Warn: binary detected: tests/data/packages/require_invalid_version-1.0-py3-none-any.whl:1","Warn: binary detected: tests/data/packages/requires_simple_extra-0.1-py2.py3-none-any.whl:1","Warn: binary detected: tests/data/packages/requires_source-1.0-py2.py3-none-any.whl:1","Warn: binary detected: tests/data/packages/script.wheel1-0.1-py2.py3-none-any.whl:1","Warn: binary detected: tests/data/packages/script.wheel1a-0.1-py2.py3-none-any.whl:1","Warn: binary detected: tests/data/packages/script.wheel2-0.1-py2.py3-none-any.whl:1","Warn: binary detected: tests/data/packages/script.wheel2a-0.1-py2.py3-none-any.whl:1","Warn: binary detected: tests/data/packages/script.wheel3-0.1-py2.py3-none-any.whl:1","Warn: binary detected: tests/data/packages/setuptools-0.9.8-py2.py3-none-any.whl:1","Warn: binary detected: tests/data/packages/simple.dist-0.1-py1-none-invalid.whl:1","Warn: binary detected: tests/data/packages/simple.dist-0.1-py2.py3-none-any.whl:1","Warn: binary detected: tests/data/packages/simple_namespace-1.0-py2.py3-none-any.whl:1","Warn: binary detected: tests/data/packages/simplewheel-1.0-py2.py3-none-any.whl:1","Warn: binary detected: tests/data/packages/simplewheel-2.0-1-py2.py3-none-any.whl:1","Warn: binary detected: tests/data/packages/simplewheel-2.0-py2.py3-none-any.whl:1","Warn: binary detected: tests/data/packages/simplewheel-2.0-py3-fakeabi-fakeplat.whl:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#binary-artifacts"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#vulnerabilities"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#signed-releases"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#fuzzing"}},{"name":"Branch-Protection","score":3,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Warn: branch 'main' does not require approvers","Warn: codeowners review is not required on branch 'main'","Info: status check found to merge onto on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#branch-protection"}},{"name":"Pinned-Dependencies","score":1,"reason":"dependency not pinned by hash detected -- score normalized to 1","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:97: update your workflow using https://app.stepsecurity.io/secureworkflow/pypa/pip/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:98: update your workflow using https://app.stepsecurity.io/secureworkflow/pypa/pip/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:128: update your workflow using https://app.stepsecurity.io/secureworkflow/pypa/pip/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:129: update your workflow using https://app.stepsecurity.io/secureworkflow/pypa/pip/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:198: update your workflow using https://app.stepsecurity.io/secureworkflow/pypa/pip/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/pypa/pip/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:233: update your workflow using https://app.stepsecurity.io/secureworkflow/pypa/pip/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:234: update your workflow using https://app.stepsecurity.io/secureworkflow/pypa/pip/ci.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:268: update your workflow using https://app.stepsecurity.io/secureworkflow/pypa/pip/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/pypa/pip/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/pypa/pip/ci.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/pypa/pip/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/pypa/pip/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:74: update your workflow using https://app.stepsecurity.io/secureworkflow/pypa/pip/ci.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lock-threads.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/pypa/pip/lock-threads.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/update-rtd-redirects.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/pypa/pip/update-rtd-redirects.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/update-rtd-redirects.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/pypa/pip/update-rtd-redirects.yml/main?enable=pin","Warn: pipCommand not pinned by hash: .github/workflows/ci.yml:150","Warn: pipCommand not pinned by hash: .github/workflows/ci.yml:242","Warn: pipCommand not pinned by hash: .github/workflows/ci.yml:36","Warn: pipCommand not pinned by hash: .github/workflows/ci.yml:83","Warn: pipCommand not pinned by hash: .github/workflows/ci.yml:103","Info:   3 out of  17 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   4 third-party GitHubAction dependencies pinned","Info:   0 out of   5 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#pinned-dependencies"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/release.yml:25"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#packaging"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-15T00:25:50.595Z","repository_id":37247006,"created_at":"2025-08-15T00:25:50.595Z","updated_at":"2025-08-15T00:25:50.595Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":35335897,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-05-26T15:22:16.424Z","status":"online","status_checked_at":"2026-07-10T02:00:06.465Z","response_time":60,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["packaging","pip","python"],"created_at":"2024-07-31T17:01:13.226Z","updated_at":"2026-07-11T02:29:08.336Z","avatar_url":"https://github.com/pypa.png","language":"Python","funding_links":["https://pypi.org/sponsor/"],"categories":["Python","\u003ca id=\"tag-dev\" href=\"#tag-dev\"\u003eDev\u003c/a\u003e","Package Management","python","HarmonyOS","Python 程序","Awesome Tools","Uncategorized","Dependency \u0026 Package Managers"],"sub_categories":["\u003ca id=\"tag-dev.pkg_mgr\" href=\"#tag-dev.pkg_mgr\"\u003ePackage Managers\u003c/a\u003e","For Python","Windows Manager","网络服务_其他","Languages","Uncategorized"],"readme":"pip - The Python Package Installer\n==================================\n\n.. |pypi-version| image:: https://img.shields.io/pypi/v/pip.svg\n   :target: https://pypi.org/project/pip/\n   :alt: PyPI\n\n.. |python-versions| image:: https://img.shields.io/pypi/pyversions/pip\n   :target: https://pypi.org/project/pip\n   :alt: PyPI - Python Version\n\n.. |docs-badge| image:: https://readthedocs.org/projects/pip/badge/?version=latest\n   :target: https://pip.pypa.io/en/latest\n   :alt: Documentation\n\n|pypi-version| |python-versions| |docs-badge|\n\npip is the `package installer`_ for Python. You can use pip to install packages from the `Python Package Index`_ and other indexes.\n\nPlease take a look at our documentation for how to install and use pip:\n\n* `Installation`_\n* `Usage`_\n\nWe release updates regularly, with a new version every 3 months. Find more details in our documentation:\n\n* `Release notes`_\n* `Release process`_\n\nIf you find bugs, need help, or want to talk to the developers, please use our mailing lists or chat rooms:\n\n* `Issue tracking`_\n* `Discourse channel`_\n* `User IRC`_\n\nIf you want to get involved, head over to GitHub to get the source code, look at our development documentation and feel free to jump on the developer mailing lists and chat rooms:\n\n* `GitHub page`_\n* `Development documentation`_\n* `Development IRC`_\n\nCode of Conduct\n---------------\n\nEveryone interacting in the pip project's codebases, issue trackers, chat\nrooms, and mailing lists is expected to follow the `PSF Code of Conduct`_.\n\n.. _package installer: https://packaging.python.org/guides/tool-recommendations/\n.. _Python Package Index: https://pypi.org\n.. _Installation: https://pip.pypa.io/en/stable/installation/\n.. _Usage: https://pip.pypa.io/en/stable/\n.. _Release notes: https://pip.pypa.io/en/stable/news.html\n.. _Release process: https://pip.pypa.io/en/latest/development/release-process/\n.. _GitHub page: https://github.com/pypa/pip\n.. _Development documentation: https://pip.pypa.io/en/latest/development\n.. _Issue tracking: https://github.com/pypa/pip/issues\n.. _Discourse channel: https://discuss.python.org/c/packaging\n.. _User IRC: https://kiwiirc.com/nextclient/#ircs://irc.libera.chat:+6697/pypa\n.. _Development IRC: https://kiwiirc.com/nextclient/#ircs://irc.libera.chat:+6697/pypa-dev\n.. _PSF Code of Conduct: https://github.com/pypa/.github/blob/main/CODE_OF_CONDUCT.md\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fpypa%2Fpip","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fpypa%2Fpip","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fpypa%2Fpip/lists"}