Skip to main content

pypi-reserve

pypi-reserve is a single-file, zero-dependency CLI for Python 3.9+ that validates a PyPI project name against every rule PyPI enforces, then publishes a minimal first release under it.

Features

  • The five checks PyPI runs at project creation, reproduced locally. A name is refused if it is invalid, already exists, is on the prohibited list, shadows a standard library module, or is too similar to an existing project. That last one is computed from warehouse's own ultranormalize key — normally it only fails at upload time, after you have picked the name and told people about it.

  • An offline name index. One PEP 691 download of the full project list — 874,595 names — cached as a 4 MB gzip, so every subsequent check runs locally and instantly.

  • Alternative name suggestions. Generated in tiers (vendor prefix, compound and reversed word forms, suffixes, prefixes, numeric variants) and each run through the same five checks, so a suggestion is never a name PyPI would turn around and reject.

  • Zero dependencies. Wheels and sdists are assembled with zipfile and tarfile; uploads are a multipart POST over urllib to the same endpoint twine uses. Field names, digest encodings and filename normalization follow warehouse's forklift/legacy.py — PEP 427 wheel names, PEP 625 sdist names, PEP 503 normalization, sha256_digest and blake2_256_digest. Pass --use-twine to hand the upload step to twine instead.

  • Rehearsal before anything is permanent. --dry-run builds without uploading, --repository testpypi targets TestPyPI, and wheel builds are byte-for-byte reproducible.

  • Credentials from wherever you keep them. ~/.pypirc, environment variables, a --token flag, or an interactive hidden prompt.

Status

Early development preview — the CLI arrives in the next release. This version installs an importable pypi_reserve module exposing __version__ and nothing else, so do not add it to your dependencies yet.

Metadata

Release files for pypi-reserve 0.0.1

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for pypi-reserve 0.0.1
File Size Uploaded Provenance
pypi_reserve-0.0.1.tar.gz 1.9 kB Without provenance Details

Built distribution (wheel)

Table of built distributions (wheels) for pypi-reserve 0.0.1
File Interpreter ABI Platform
pypi_reserve-0.0.1-py3-none-any.whl Python 3 none any Details

Total release size: 4.5 kB

Release files / pypi_reserve-0.0.1.tar.gz

Download URL pypi_reserve-0.0.1.tar.gz
Size 1.9 kB
Tags Source
SHA-256 checksum
How to use checksums
931da375dcd52173ffa8e07397c39c06ccdc6fc641c1ccee92d64f3ce7d7698b
BLAKE2b-256 checksum
How to use checksums
a762c12bdf73910bc4b09bc9a4fe73492b614ca4091aba30c20234758aad508c
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
No
Uploaded via pypi-reserve/1.1.0

Release files / pypi_reserve-0.0.1-py3-none-any.whl

Download URL pypi_reserve-0.0.1-py3-none-any.whl
Size 2.6 kB
Tags Python 3
SHA-256 checksum
How to use checksums
afc3b77900c55dab5e42427f466a0578ca9487f60db52c377e3af187998acbb3
BLAKE2b-256 checksum
How to use checksums
67b1ce4787151a75c7b49049ff761e0240ca7631ea58f202364545fac739707b
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
No
Uploaded via pypi-reserve/1.1.0

Security for pypi-reserve 0.0.1

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

No provenance found

None of the files in this release were uploaded with provenance metadata.

A note on package security

PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.

To learn more about protecting yourself from malicious actors, visit our package security documentation.

Release history Release notifications | RSS feed

This release

0.0.1 This release

2 release files No provenance

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page