Skip to main content
Pre-release

This release is a pre-release and may not be stable for production use.

ModelExpress Python Client

Python client for ModelExpress -- high-performance GPU-to-GPU model weight transfers using NVIDIA NIXL over RDMA/InfiniBand.

Instead of each inference engine instance loading model weights from storage, one instance loads the model and transfers weights directly to later instances via GPUDirect RDMA, bypassing the CPU entirely.

Installation

# From PyPI (coming soon)
pip install modelexpress

# Editable install from source
pip install -e .

# With test dependencies
pip install -e ".[dev]"

# Additionally install the pinned protobuf code generator when changing protobuf APIs
pip install -e ".[codegen]"

NIXL is expected to be supplied by the runtime environment (TRT-LLM, SGLang, Dynamo, and NemoRL runtime images all ship nixl-cu12 or nixl-cu13). For a bare-environment install, run pip install nixl-cu12 or pip install nixl-cu13 separately, matching your host CUDA toolkit.

The collective refit path in modelexpress_rl.collective needs NCCL M2N, which ships separately from nccl4py as the nccl-extensions distribution under the same nccl namespace. Run pip install "nccl-extensions[cu12]" or pip install "nccl-extensions[cu13]", matching your host CUDA toolkit. The CUDA major has to be named: a bare pip install nccl-extensions resolves and then fails to import, because cuda-bindings only arrives through one of those two extras. Nothing else in the client imports it, so an installation that never uses collective refit does not need it.

Reshard needs NCCL 2.30.7 or newer, and an image that ships its own older libnccl will win the load over the one pip installed. That failure surfaces inside the reshard call rather than at import, so check which library the process resolves rather than which one is on disk. The NGC PyTorch 26.06 image ships 2.30.5 and needs the newer library preloaded.

Requirements

  • Python >= 3.10
  • protobuf >= 5.27.2 and < 7
  • NVIDIA GPUs with RDMA/InfiniBand support
  • NIXL (NVIDIA Interconnect eXchange Library)
  • NCCL M2N (nccl-extensions, collective refit only)
  • A running ModelExpress server (Rust gRPC service backed by Redis)

Quick Start with vLLM

vLLM 0.23.0 and newer recognize --load-format modelexpress natively. Install the ModelExpress Python package in the vLLM image; no VLLM_PLUGINS setting or manual loader registration is required. For older vLLM versions, set VLLM_PLUGINS=modelexpress or call register_modelexpress_loaders() manually.

export MX_SERVER_ADDRESS="modelexpress-server:8001"

vllm serve deepseek-ai/DeepSeek-V4-Pro \
    --load-format modelexpress \
    --tensor-parallel-size 8 \
    --trust-remote-code

Starting the vLLM engine with the modelexpress load format on the source worker will load the weights from disk and register/publish the NIXL and tensor metadata to the MX server. The mx load format is kept as a backward-compatible alias. On the target worker, it retrieves metadata from the MX server and streams weights over RDMA from GPU to GPU. Set MX_ARTIFACT_TRANSFER=1 to also reuse compatible vLLM JIT caches from a ready source.

Quick Start with SGLang

SGLang integrates through its remote_instance loader with the modelexpress backend. Use an SGLang image that includes upstream sgl-project/sglang#24723, such as the known-good release image lmsysorg/sglang:v0.5.13.post1, and install the ModelExpress package into that image.

export MX_SERVER_ADDRESS="modelexpress-server:8001"

python -m sglang.launch_server \
    --model-path deepseek-ai/DeepSeek-V3 \
    --tp 8 \
    --load-format remote_instance \
    --remote-instance-weight-loader-backend modelexpress \
    --modelexpress-config '{"transport": "nixl"}'

Quick Start with TensorRT-LLM

TensorRT-LLM integrates through its native checkpoint_format="MX" interface. Install ModelExpress in a qualified TensorRT-LLM image, then construct the PyTorch backend with the ModelExpress server configuration:

from tensorrt_llm.llmapi import LLM

llm = LLM(
    model="/model",
    checkpoint_format="MX",
    mx_config={
        "server_url": "modelexpress-server:8001",
    },
    tensor_parallel_size=4,
    backend="pytorch",
)

The first replica falls back to the Hugging Face checkpoint and publishes its post-transform weights; later compatible replicas receive them through ModelExpress. The current qualified scope is the LlamaForCausalLM family. See the TensorRT-LLM P2P example for the qualified-image requirement and production-style Kubernetes deployment.

Programmatic Usage

RL trainer and generator APIs

See the RL package quickstart and support guide for trainer publication, generator initialization, and import examples.

MxClient

MxClient is a lightweight gRPC client for communicating with the ModelExpress server:

from modelexpress import MxClient

client = MxClient(server_url="modelexpress-server:8001")

# Query for a source model
response = client.get_metadata("deepseek-ai/DeepSeek-V4-Pro")
if response.found:
    for worker in response.workers:
        print(f"Worker rank {worker.worker_rank}: {len(worker.tensors)} tensors")

# Wait for source readiness (blocks until ready or timeout)
success, session_id, metadata_hash = client.wait_for_ready(
    model_name="deepseek-ai/DeepSeek-V4-Pro",
    worker_id=0,
    timeout_seconds=7200,
)

client.close()

Registering Loaders Manually

Manual registration is only needed for integrations that construct vLLM loaders outside vLLM 0.23.0's native load-format path.

from modelexpress import register_modelexpress_loaders

register_modelexpress_loaders()
# Now vLLM recognizes --load-format modelexpress and mx

Environment Variables

Shared client settings are registered in modelexpress.envs. RL settings are listed in the RL configuration reference.

Variable Default Description
MX_SERVER_ADDRESS localhost:8001 ModelExpress gRPC server address (recommended)
MODEL_EXPRESS_URL localhost:8001 Deprecated in favor of MX_SERVER_ADDRESS. Still read by all client paths and still takes precedence when both are set, because the TRT-LLM live-transfer integration reads only this name. It is removed once that path reads MX_SERVER_ADDRESS; until then set both to the same value.
MX_DISABLE_PATCHES 0 Emergency escape hatch that skips all runtime compatibility patches. Set to 1, true, yes, or on if a patch is incompatible with the installed engine.
MX_EXPECTED_WORKERS Auto-detected from TP size Number of GPU workers to coordinate
MX_SYNC_PUBLISH 0 Source: wait for all workers before publishing metadata
MX_SYNC_START 1 Target: wait for all source workers before transferring
MX_POOL_REG 0 Allocation-level NIXL registration (registers cudaMalloc blocks instead of individual tensors)
MX_P2P_METADATA 1 Serve tensor and artifact manifests directly from source workers; set to 0 to route full tensor metadata through the central server
MX_ARTIFACT_TRANSFER 0 Transfer compatible vLLM TorchInductor, Triton, DeepGEMM, TileLang, CuTe DSL, and FlashInfer JIT caches, including persistent autotune files when supported by vLLM
MX_ARTIFACT_BUNDLE_ROOT $TMPDIR/modelexpress-artifacts Staging root for tarred cache artifact bundles
MX_ARTIFACT_COMPILE_CONFIG_DIGEST empty Optional compile-configuration compatibility digest for cache discovery
MX_ARTIFACT_READY_URL Framework default Readiness endpoint checked before a source publishes weights or JIT cache artifacts (http://127.0.0.1:8000/health for vLLM; http://127.0.0.1:30000/health for SGLang). On the non-head nodes of a multi-node engine, a loopback host is rewritten onto the head's address (the engine's own distributed-init address, else LWS_LEADER_ADDRESS), preserving the configured port and path. A non-loopback host is used verbatim
MX_ARTIFACT_READY_TIMEOUT_SECS 1800 Maximum time to wait for readiness and successful artifact publication
MX_HEARTBEAT_INTERVAL_SECS 30 Seconds between READY status heartbeats for published sources, including reshard rendezvous sources; keep below the server heartbeat timeout

Canonical S3 Transfer Tuning

Objects below the configured thresholds use one PUT or GET. Larger uploads use multipart parts. Downloads default to one persistent s3transfer.TransferManager per S3Client. Set MX_S3_DOWNLOAD_BACKEND=preallocated to opt in to parallel GETs into a preallocated buffer. This affects canonical S3 artifact downloads for refit and recovery; the normal ModelStreamer loading path has its own downloader.

The preallocated backend starts with HEAD for size and ETag. Below the range threshold, it performs one whole-object GET; otherwise it issues parallel ranges. All data GETs, including the first range and body-read retries, share one per-client pool limited by MX_REFIT_DOWNLOAD_WORKERS (falling back to MX_S3_DOWNLOAD_WORKERS, then 16). HEAD requests are outside this data-GET budget. Every GET is pinned to the HEAD ETag with IfMatch; an object change or an invalid range response fails without retrying. Endpoints must support HEAD, conditional GET, and byte ranges. Transient body-read failures use capped exponential backoff with full jitter (0–100 ms before the first retry, doubling to a 2 s cap); request retries remain managed by botocore. Each backend owns its download resources behind a shared get/close interface. Select transfer_manager explicitly to return to the default implementation; there is no automatic backend switch on an error.

Ranges write directly into a preallocated BytesIO buffer. Exported views are released before returning immutable bytes, avoiding a second full-object allocation on CPython. Older SDK bodies without readinto use bounded read chunks. The complete object remains resident, and concurrent file downloads and retained delta shards add to peak memory; this is not a bounded-memory model streamer. Validate peak RSS and throughput on your target endpoint and runtime before enabling it for large models.

Variable Default Description
MX_S3_DOWNLOAD_BACKEND transfer_manager transfer_manager or opt-in preallocated
MX_S3_MULTIPART_THRESHOLD_BYTES 104857600 (100 MiB) Minimum object size for multipart upload
MX_S3_UPLOAD_PART_BYTES 16777216 (16 MiB) Multipart upload part size
MX_S3_UPLOAD_WORKERS 8 Maximum concurrent multipart part uploads
MX_S3_DOWNLOAD_RANGE_THRESHOLD_BYTES 104857600 (100 MiB) Minimum object size for parallel ranged download
MX_S3_DOWNLOAD_RANGE_BYTES 8388608 (8 MiB) Byte-range size for parallel downloads
MX_S3_DOWNLOAD_WORKERS 16 Legacy fallback for MX_REFIT_DOWNLOAD_WORKERS; sets file-worker and per-client data GET limits for either backend
MX_S3_DOWNLOAD_IO_CHUNK_BYTES 1048576 (1 MiB) TransferManager I/O queue chunk size; preallocated-backend read chunk limit for SDK bodies without readinto
MX_S3_DOWNLOAD_MAX_IN_MEMORY_CHUNKS 16 TransferManager only: sets max_io_queue_size and the non-seekable-output chunk limit. For the seekable BytesIO target, the default bounds queued I/O to about 16 MiB but does not cap the full downloaded object
MX_S3_MAX_POOL_CONNECTIONS 32 Botocore HTTP connection-pool size
MX_S3_MAX_ATTEMPTS 5 Botocore total request attempts and per-download (TransferManager) or per-range (preallocated backend) body-read attempts
MX_S3_TCP_KEEPALIVE true Enable TCP keepalive for S3 connections

To compare the SDK writer with direct parallel writes, run the three-arm benchmark from modelexpress_client/python against an immutable S3 object:

PYTHONPATH=. python benchmarks/bench_s3_download.py s3://bucket/checkpoint \
  --iterations 3 --warmup 1

It compares default TransferManager, TransferManager with preallocated output, and the preallocated backend using the same transfer settings. It rotates arm order, checks payload hashes and object ETags, and emits per-download JSON timing and throughput. Hashing is outside the timed interval; HEAD and buffer setup needed by each arm are included. Use --endpoint-url and --region-name for compatible endpoints. Run on the target host and endpoint: the reported upstream GB300 result does not establish that buffer growth causes the performance gap.

UCX/NIXL Tuning

Variable Recommended Description
UCX_RNDV_SCHEME get_zcopy Zero-copy RDMA reads
UCX_RNDV_THRESH 0 Force rendezvous for all transfers
NIXL_LOG_LEVEL INFO NIXL logging level

Package Structure

Module Description
modelexpress.client MxClient -- gRPC client for the ModelExpress server
modelexpress.metadata Metadata clients, source identity, publishing, and worker manifest serving
modelexpress.engines.vllm.loader MxModelLoader -- vLLM integration
modelexpress.engines.sglang.loader MxModelLoader -- SGLang remote_instance integration
modelexpress.engines.trtllm.loader MxModelLoader -- TensorRT-LLM shared-strategy integration
modelexpress.vllm_loader Compatibility shim for the vLLM loader
modelexpress.nixl_transfer NixlTransferManager -- NIXL agent lifecycle and RDMA transfers
modelexpress.types TensorDescriptor, WorkerMetadata -- core data types
modelexpress.vllm_worker Compatibility worker extension for older manual-registration workflows

The optional RL APIs are installed with this distribution under the modelexpress_rl namespace. See the RL package guide.

How It Works

  1. Source loads weights from disk, registers raw tensors with NIXL before FP8 processing, and publishes metadata to the ModelExpress server.
  2. Target creates dummy weights, waits for the source ready flag, then pulls raw tensors via RDMA read.
  3. Both source and target run process_weights_after_loading() independently, producing identical FP8-transformed weights.
  4. When artifact transfer is enabled, a healthy source publishes its pod-scoped JIT caches and later pods install compatible caches before model initialization.

This pre-processing transfer strategy is critical for FP8 models (e.g., DeepSeek-V4-Pro) where tensors are renamed and transformed during processing.

License

Apache-2.0

Metadata

Release files for modelexpress 0.8.0.dev20261030

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Built distributions (wheels)

Table of built distributions (wheels) for modelexpress 0.8.0.dev20261030
File Actions
modelexpress-0.8.0.dev20261030-py3-none-any.whl Python 3 none any Details for modelexpress-0.8.0.dev20261030-py3-none-any.whl
modelexpress-0.8.0.dev20261030-cp313-cp313-manylinux_2_24_x86_64.manylinux_2_28_x86_64.whl CPython 3.13 CPython 3.13 Linux glibc 2.28+ x86-64, Linux glibc 2.24+ x86-64 Details for modelexpress-0.8.0.dev20261030-cp313-cp313-manylinux_2_24_x86_64.manylinux_2_28_x86_64.whl
modelexpress-0.8.0.dev20261030-cp313-cp313-manylinux_2_24_aarch64.manylinux_2_28_aarch64.whl CPython 3.13 CPython 3.13 Linux glibc 2.28+ ARM64, Linux glibc 2.24+ ARM64 Details for modelexpress-0.8.0.dev20261030-cp313-cp313-manylinux_2_24_aarch64.manylinux_2_28_aarch64.whl
modelexpress-0.8.0.dev20261030-cp312-cp312-manylinux_2_24_x86_64.manylinux_2_28_x86_64.whl CPython 3.12 CPython 3.12 Linux glibc 2.28+ x86-64, Linux glibc 2.24+ x86-64 Details for modelexpress-0.8.0.dev20261030-cp312-cp312-manylinux_2_24_x86_64.manylinux_2_28_x86_64.whl
modelexpress-0.8.0.dev20261030-cp312-cp312-manylinux_2_24_aarch64.manylinux_2_28_aarch64.whl CPython 3.12 CPython 3.12 Linux glibc 2.28+ ARM64, Linux glibc 2.24+ ARM64 Details for modelexpress-0.8.0.dev20261030-cp312-cp312-manylinux_2_24_aarch64.manylinux_2_28_aarch64.whl
modelexpress-0.8.0.dev20261030-cp311-cp311-manylinux_2_24_x86_64.manylinux_2_28_x86_64.whl CPython 3.11 CPython 3.11 Linux glibc 2.24+ x86-64, Linux glibc 2.28+ x86-64 Details for modelexpress-0.8.0.dev20261030-cp311-cp311-manylinux_2_24_x86_64.manylinux_2_28_x86_64.whl
modelexpress-0.8.0.dev20261030-cp311-cp311-manylinux_2_24_aarch64.manylinux_2_28_aarch64.whl CPython 3.11 CPython 3.11 Linux glibc 2.24+ ARM64, Linux glibc 2.28+ ARM64 Details for modelexpress-0.8.0.dev20261030-cp311-cp311-manylinux_2_24_aarch64.manylinux_2_28_aarch64.whl
modelexpress-0.8.0.dev20261030-cp310-cp310-manylinux_2_24_x86_64.manylinux_2_28_x86_64.whl CPython 3.10 CPython 3.10 Linux glibc 2.24+ x86-64, Linux glibc 2.28+ x86-64 Details for modelexpress-0.8.0.dev20261030-cp310-cp310-manylinux_2_24_x86_64.manylinux_2_28_x86_64.whl
modelexpress-0.8.0.dev20261030-cp310-cp310-manylinux_2_24_aarch64.manylinux_2_28_aarch64.whl CPython 3.10 CPython 3.10 Linux glibc 2.24+ ARM64, Linux glibc 2.28+ ARM64 Details for modelexpress-0.8.0.dev20261030-cp310-cp310-manylinux_2_24_aarch64.manylinux_2_28_aarch64.whl

Total release size: 6.2 MB

Release files / modelexpress-0.8.0.dev20261030-py3-none-any.whl

Download URL modelexpress-0.8.0.dev20261030-py3-none-any.whl
Size 615.8 kB
Tags Python 3
SHA-256 checksum
How to use checksums
3d7ebd150e6ea908f144dd32b5a274805511fcd770c1a95b1c33c467e475f77b
BLAKE2b-256 checksum
How to use checksums
624ee3c14fc946527841cc9aeb23527b7557fe0a5267e8ed2926c12906dbe4c7
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
No
Uploaded via twine/7.0.0 CPython/3.14.8

Release files / modelexpress-0.8.0.dev20261030-cp313-cp313-manylinux_2_24_x86_64.manylinux_2_28_x86_64.whl

Download URL modelexpress-0.8.0.dev20261030-cp313-cp313-manylinux_2_24_x86_64.manylinux_2_28_x86_64.whl
Size 701.8 kB
Tags CPython 3.13 Linux glibc 2.24+ x86-64 Linux glibc 2.28+ x86-64
SHA-256 checksum
How to use checksums
f6970c17a790f0f54691d86b6fac39708b344c6ab530e1d0a2d96bec802a2fcf
BLAKE2b-256 checksum
How to use checksums
d8a73580d16ea59a33ea6d940aaa96dc68aa660bd0735675eeb100b74141977a
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
No
Uploaded via twine/7.0.0 CPython/3.14.8

Release files / modelexpress-0.8.0.dev20261030-cp313-cp313-manylinux_2_24_aarch64.manylinux_2_28_aarch64.whl

Download URL modelexpress-0.8.0.dev20261030-cp313-cp313-manylinux_2_24_aarch64.manylinux_2_28_aarch64.whl
Size 702.3 kB
Tags CPython 3.13 Linux glibc 2.24+ ARM64 Linux glibc 2.28+ ARM64
SHA-256 checksum
How to use checksums
7c9dabb4b93c908df5e8d3403d77156caca75aae197e4f677cffada304296ada
BLAKE2b-256 checksum
How to use checksums
8eb9ea36df115a86d13f68e5a48ab7c2be02ce0d6eba4ef3fc46fa01e19703bd
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
No
Uploaded via twine/7.0.0 CPython/3.14.8

Release files / modelexpress-0.8.0.dev20261030-cp312-cp312-manylinux_2_24_x86_64.manylinux_2_28_x86_64.whl

Download URL modelexpress-0.8.0.dev20261030-cp312-cp312-manylinux_2_24_x86_64.manylinux_2_28_x86_64.whl
Size 701.7 kB
Tags CPython 3.12 Linux glibc 2.24+ x86-64 Linux glibc 2.28+ x86-64
SHA-256 checksum
How to use checksums
3bc29810d0583299b5071bc37b10bcda1b31d0163c15cbcb83719ec6e3338762
BLAKE2b-256 checksum
How to use checksums
78cc27bff8fca616ce9b55832674a8dc38ef0046f73226ff517b8816956ad2d0
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
No
Uploaded via twine/7.0.0 CPython/3.14.8

Release files / modelexpress-0.8.0.dev20261030-cp312-cp312-manylinux_2_24_aarch64.manylinux_2_28_aarch64.whl

Download URL modelexpress-0.8.0.dev20261030-cp312-cp312-manylinux_2_24_aarch64.manylinux_2_28_aarch64.whl
Size 702.2 kB
Tags CPython 3.12 Linux glibc 2.24+ ARM64 Linux glibc 2.28+ ARM64
SHA-256 checksum
How to use checksums
a4d571571d910b734bbb8d385ed976d3d950be2cf488950be884dce59fa61a76
BLAKE2b-256 checksum
How to use checksums
39f31b4272e5765e1ced71838c92446fb7d0afc602fec4501182c61e44890db6
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
No
Uploaded via twine/7.0.0 CPython/3.14.8

Release files / modelexpress-0.8.0.dev20261030-cp311-cp311-manylinux_2_24_x86_64.manylinux_2_28_x86_64.whl

Download URL modelexpress-0.8.0.dev20261030-cp311-cp311-manylinux_2_24_x86_64.manylinux_2_28_x86_64.whl
Size 701.7 kB
Tags CPython 3.11 Linux glibc 2.24+ x86-64 Linux glibc 2.28+ x86-64
SHA-256 checksum
How to use checksums
6feb3594c4f4e36329afba15e34a9ef2738e8ee8a778a46815d9e8d0cd37a14d
BLAKE2b-256 checksum
How to use checksums
6e825fc54f1f5d0b25f5beb0ff2d7b681034c29ccce83e19f464af25144a26d6
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
No
Uploaded via twine/7.0.0 CPython/3.14.8

Release files / modelexpress-0.8.0.dev20261030-cp311-cp311-manylinux_2_24_aarch64.manylinux_2_28_aarch64.whl

Download URL modelexpress-0.8.0.dev20261030-cp311-cp311-manylinux_2_24_aarch64.manylinux_2_28_aarch64.whl
Size 702.4 kB
Tags CPython 3.11 Linux glibc 2.24+ ARM64 Linux glibc 2.28+ ARM64
SHA-256 checksum
How to use checksums
8e1f2031302e18f0471697a8edde08bc2d7c3469fa0dbcac0d21663c07ea4e29
BLAKE2b-256 checksum
How to use checksums
cfbcb5d483bb546b88acd147032cb0fb034bdcaa9449636a24d86d890e0aa848
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
No
Uploaded via twine/7.0.0 CPython/3.14.8

Release files / modelexpress-0.8.0.dev20261030-cp310-cp310-manylinux_2_24_x86_64.manylinux_2_28_x86_64.whl

Download URL modelexpress-0.8.0.dev20261030-cp310-cp310-manylinux_2_24_x86_64.manylinux_2_28_x86_64.whl
Size 700.8 kB
Tags CPython 3.10 Linux glibc 2.24+ x86-64 Linux glibc 2.28+ x86-64
SHA-256 checksum
How to use checksums
1f697acc7a6addfee7bb8ac31eb802e27ab37264e32abd0a9c6bd1d387cfd006
BLAKE2b-256 checksum
How to use checksums
0c879bd143cd8d5a436efc843bde43447b07986bf22350ef7af6d082286a3abe
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
No
Uploaded via twine/7.0.0 CPython/3.14.8

Release files / modelexpress-0.8.0.dev20261030-cp310-cp310-manylinux_2_24_aarch64.manylinux_2_28_aarch64.whl

Download URL modelexpress-0.8.0.dev20261030-cp310-cp310-manylinux_2_24_aarch64.manylinux_2_28_aarch64.whl
Size 701.4 kB
Tags CPython 3.10 Linux glibc 2.24+ ARM64 Linux glibc 2.28+ ARM64
SHA-256 checksum
How to use checksums
34b7cb00044b08fe440fbe31b8ab78e3d5570e2f3a7b245bea3d16392740ee0c
BLAKE2b-256 checksum
How to use checksums
ddb0651fae29060531e7084aa3391259785dec0a1daaaad4136d1a99cd9c51f3
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
No
Uploaded via twine/7.0.0 CPython/3.14.8

Security for modelexpress 0.8.0.dev20261030

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

No provenance found

None of the files in this release were uploaded with provenance metadata.

A note on package security

PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.

To learn more about protecting yourself from malicious actors, visit our package security documentation.

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page