devpi-private-mirrors
Plugin prevent mixing packages using both private and public mirrors at the same time.
Installation
pip install devpi-private-mirrors
There is no configuration needed as devpi-server will automatically discover the plugin through calling hooks using the setuptools entry points mechanism.
Motivation
Sometimes you need to use private mirrors, but still want access to pypi.
With base devpi only option is to specify both as private index bases, but in that case you got mix of packages and their versions between private and public mirrors.
Which leads to security and compatibility issues.
This plugin allows mark some indexes as private and hide all packages from them from public indexes.
Usage
Create local index with stage_private_base type with several mirrors
devpi index -c root/dev type=stage_private_base bases=root/private1,root/private2,root/pypi
Set private_base option for all private bases
devpi root/private1 private_base=True
devpi root/private2 private_base=True
Now private mirrors will not be mixed with public.
Note: private indexes can be mixed with each other (for example, if you have some version of package in private1 and some in private2, you will get both versions).
1 maintainer
Metadata
1 maintainer
Release files for devpi-private-mirrors 0.0.3
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | Actions |
|---|---|---|---|---|
| devpi-private-mirrors-0.0.3.tar.gz | 3.8 kB | Without provenance | Details for devpi-private-mirrors-0.0.3.tar.gz |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Actions Reset |
|---|---|---|---|---|
| devpi_private_mirrors-0.0.3-py3-none-any.whl | Python 3 | none | any | Details for devpi_private_mirrors-0.0.3-py3-none-any.whl |
Total release size: 8.1 kB
Release files / devpi-private-mirrors-0.0.3.tar.gz
| Download URL | devpi-private-mirrors-0.0.3.tar.gz |
|---|---|
| Size | 3.8 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
1d16b99b15efd7e763a5a8a264e7ec31949fbc14348f0835247b465a5d9ce750
|
|
BLAKE2b-256 checksum How to use checksums |
7d77981ee3d0c5c47c05e346cb2d77ea1d4969e595a727cb6377cb3cb2a4aad6
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/4.0.1 CPython/3.11.0
|
Release files / devpi_private_mirrors-0.0.3-py3-none-any.whl
| Download URL | devpi_private_mirrors-0.0.3-py3-none-any.whl |
|---|---|
| Size | 4.3 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
3af1123abee2a4634a0931b418788a1ba668735f7775843440350ae1580f282a
|
|
BLAKE2b-256 checksum How to use checksums |
419378a72637b4b7d6e97d33031c7d5d802f98a3a43dc76484cfcca043e9dc6d
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/4.0.1 CPython/3.11.0
|
Security for devpi-private-mirrors 0.0.3
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
No provenance found
None of the files in this release were uploaded with provenance metadata.
A note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
To learn more about protecting yourself from malicious actors, visit our package security documentation.
