lpip
Install internal Python packages by name, from Git you already have. No private package index.
On PyPI this tool is esys-lpip. The command you run is lpip.
pip install esys-lpip
lpip --help
Why it exists
A private PyPI is another service to host, another login, another secret. Most teams already have Git, SSH keys, and a rule that the default branch stays green.
lpip treats that Git as the index. A short catalog maps a name to a
repository. lpip install libfoo becomes an ordinary pip install of that
tree. Access control is clone access — nothing new.
Public PyPI is only how you install this client. Your packages stay in the Git you already operate.
What that unlocks
pip install <name>for internals — without standing up a registry.- One catalog for the org — add it once; everyone uses the same names.
- Share work when a PR merges — if the catalog tracks
main/master, a green merge is enough.lpip upgrade libfoopicks up the tip. A tagged release is optional, for when you need a pin, not for when you need to share.
It is a thin front end to pip, not a replacement for pip, and not a workspace manager.
Try it
Point lpip at a catalog (a local file or a Git repo that contains
lpip-sources.toml), then:
lpip install libfoo
lpip upgrade libfoo
lpip list
Next
Product documentation:
Source and contributor contracts:
https://gitlab.com/libesys/tools/lpip
License: MIT (see the LICENSE file in the repository).
Metadata
Release files for esys-lpip 0.4.1
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | |
|---|---|---|---|---|
| esys_lpip-0.4.1.tar.gz | 43.8 kB | Without provenance | Details |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Reset |
|---|---|---|---|---|
| esys_lpip-0.4.1-py3-none-any.whl | Python 3 | none | any | Details |
Total release size: 74.6 kB
Release files / esys_lpip-0.4.1.tar.gz
| Download URL | esys_lpip-0.4.1.tar.gz |
|---|---|
| Size | 43.8 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
aef857ebc1d565e3264d9856e64befc4013063b7fc840a13c27b552442a4062c
|
|
BLAKE2b-256 checksum How to use checksums |
ddde30e6833d387506e5e787313cf0926e63324c83895a5e90cf16b3afb9cda6
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/7.0.0 CPython/3.11.16
|
Release files / esys_lpip-0.4.1-py3-none-any.whl
| Download URL | esys_lpip-0.4.1-py3-none-any.whl |
|---|---|
| Size | 30.8 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
3ede05bed513ad20f93f9169c1e355f8ae80df2c3cbbfbaf3c2d6772f1e0f252
|
|
BLAKE2b-256 checksum How to use checksums |
dc612f294557f71a24fd0382a29049a552b6bc1415ca56d9d2cbe22e0d09a424
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/7.0.0 CPython/3.11.16
|
Security for esys-lpip 0.4.1
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
No provenance found
None of the files in this release were uploaded with provenance metadata.
A note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.