lpip
Install internal Python packages by name, from Git you already have. No private package index.
On PyPI this tool is esys-lpip. The command you run is lpip.
pip install esys-lpip
lpip --help
Why it exists
A private PyPI is another service to host, another login, another secret. Most teams already have Git, SSH keys, and a rule that the default branch stays green.
lpip treats that Git as the index. A short catalog maps a name to a
repository. lpip install libfoo becomes an ordinary pip install of that
tree. Access control is clone access — nothing new.
Public PyPI is only how you install this client. Your packages stay in the Git you already operate.
What that unlocks
pip install <name>for internals — without standing up a registry.- One catalog for the org — add it once; everyone uses the same names.
- Share work when a PR merges — if the catalog tracks
main/master, a green merge is enough.lpip upgrade libfoopicks up the tip. A tagged release is optional, for when you need a pin, not for when you need to share. Install a commit without a tag:lpip install libfoo --revision <sha>.
It is a thin front end to pip, not a replacement for pip, and not a workspace manager.
Try it
Point lpip at a catalog (a local file or a Git repo that contains
lpip-sources.toml), then:
lpip install libfoo
lpip upgrade libfoo
lpip list
Next
Product documentation:
Source and contributor contracts:
https://gitlab.com/libesys/tools/lpip
License: MIT (see the LICENSE file in the repository).
Metadata
Release files for esys-lpip 0.5.0
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | |
|---|---|---|---|---|
| esys_lpip-0.5.0.tar.gz | 46.6 kB | Without provenance | Details |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Reset |
|---|---|---|---|---|
| esys_lpip-0.5.0-py3-none-any.whl | Python 3 | none | any | Details |
Total release size: 77.9 kB
Release files / esys_lpip-0.5.0.tar.gz
| Download URL | esys_lpip-0.5.0.tar.gz |
|---|---|
| Size | 46.6 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
90758976ffa0af8fb1e1d77f8a7350b3e404f1ef842cc626d843cd7f2dc3f4f7
|
|
BLAKE2b-256 checksum How to use checksums |
8ce07c20661a3dc8220c8ef62c7699100d12b3fe16e4f43fb1ed138ca6af97cf
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/7.0.0 CPython/3.11.16
|
Release files / esys_lpip-0.5.0-py3-none-any.whl
| Download URL | esys_lpip-0.5.0-py3-none-any.whl |
|---|---|
| Size | 31.3 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
875e6c274d690ce45ac8d2b7d0670ebcfb65c114b15fd3478667b72211759eeb
|
|
BLAKE2b-256 checksum How to use checksums |
57aa72a9ed1feebe5742877753cc68cbd6b93bc262702f4b58a9ac32bc4caa68
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/7.0.0 CPython/3.11.16
|
Security for esys-lpip 0.5.0
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
No provenance found
None of the files in this release were uploaded with provenance metadata.
A note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.