lpip
Install internal Python packages by name, from Git you already have. No private package index.
On PyPI this tool is esys-lpip. The command you run is lpip.
pip install esys-lpip
lpip --help
Why it exists
A private PyPI is another service to host, another login, another secret. Most teams already have Git, SSH keys, and a rule that the default branch stays green.
lpip treats that Git as the index. A short catalog maps a name to a
repository. lpip install libfoo becomes an ordinary pip install of that
tree. Access control is clone access — nothing new.
Public PyPI is only how you install this client. Your packages stay in the Git you already operate.
What that unlocks
pip install <name>for internals — without standing up a registry.- One catalog for the org — add it once; everyone uses the same names.
- Share work when a PR merges — if the catalog tracks
main/master, a green merge is enough.lpip upgrade libfoopicks up the tip. A tagged release is optional, for when you need a pin, not for when you need to share.
It is a thin front end to pip, not a replacement for pip, and not a workspace manager.
Try it
Point lpip at a catalog (a local file or a Git repo that contains
lpip-sources.toml), then:
lpip install libfoo
lpip upgrade libfoo
lpip list
Next
Product documentation:
Source and contributor contracts:
https://gitlab.com/libesys/tools/lpip
License: MIT (see the LICENSE file in the repository).
Metadata
Release files for esys-lpip 0.4.2
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | |
|---|---|---|---|---|
| esys_lpip-0.4.2.tar.gz | 45.6 kB | Without provenance | Details |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Reset |
|---|---|---|---|---|
| esys_lpip-0.4.2-py3-none-any.whl | Python 3 | none | any | Details |
Total release size: 76.6 kB
Release files / esys_lpip-0.4.2.tar.gz
| Download URL | esys_lpip-0.4.2.tar.gz |
|---|---|
| Size | 45.6 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
20b74d9f9597aca4fafea623e6e42d4c9a50fe3e487972cd7bf3b55f5e7d53db
|
|
BLAKE2b-256 checksum How to use checksums |
f544240106ad04c90e18b93ede9fa9ad2eaf01c946eee5988d96b3f73daf5463
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/7.0.0 CPython/3.11.16
|
Release files / esys_lpip-0.4.2-py3-none-any.whl
| Download URL | esys_lpip-0.4.2-py3-none-any.whl |
|---|---|
| Size | 31.0 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
33a76cab04ffc46378feaab3d3fc33821ae6256ba8f2a5738df729b0185c3219
|
|
BLAKE2b-256 checksum How to use checksums |
797d5c421204aa142db71e4657ea287f18dbb3a4091c950c96a98920425cf3ab
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/7.0.0 CPython/3.11.16
|
Security for esys-lpip 0.4.2
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
No provenance found
None of the files in this release were uploaded with provenance metadata.
A note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.