[Distutils] [Python-ideas] Pypi private repo's

Dustin Ingram di at di.codes
Wed Apr 4 17:24:49 EDT 2018

This was recently discussed on the Packaging-WG mailing list. To
summarize, there are a few key reasons why this would be challenging:

1) The PSF is a non-profit. Taking on work generally in the domain of
for-profit enterprises might jeopardize our tax-exempt status.

2) PyPI relies heavily (~$1M/yr) on donated services and
infrastructure. If we start trying to make money, our sponsors may not
appreciate it.

3) If PyPI is in the business of hosting private packages, it may
de-incentivize us from helping to make sure "competing" private
indices (devpi, Artifactory, gemfury, etc) are functional.

4) With the exception of the current MOSS grant, PyPI is supported
entirely by unpaid volunteers. Is it fair to ask volunteers to
continue contributing their time to a for-profit enterprise?

Not to say that this would be impossible -- PyCon is quite similar
(turns a profit, has sponsors, competes with other conferences, uses
volunteer support) has addressed (and is addressing) many of these
challenges, but it remains that the transition would be challenging.


On Wed, Apr 4, 2018 at 3:55 PM, Alex Walters <tritium-list at sdamon.com> wrote:
> I am fairly sure if you give the PyPA that suggestion, they will just
> deflate at the thought of the workload.  Besides, we already offer private
> repos for free, several ways ranging from devpi to python -m
> SimpleHTTPServer in a specially created directory.
> From: Python-ideas <python-ideas-bounces+tritium-list=sdamon.com at python.org>
> On Behalf Of Nick Humrich
> Sent: Wednesday, April 4, 2018 12:26 PM
> To: python-ideas at python.org
> Subject: [Python-ideas] Pypi private repo's
> I am sure this has been discussed before, and this might not even be the
> best place for this discussion, but I just wanted to make sure this has been
> thought about.
> What if pypi.org supported private repos at a cost, similar to npm?
> This would be able to help support the cost of pypi, and hopefully make it
> better/more reliable, thus in turn improving the python community.
> If this discussion should happen somewhere else, let me know.
> Nick
> _______________________________________________
> Distutils-SIG maillist  -  Distutils-SIG at python.org
> https://mail.python.org/mailman/listinfo/distutils-sig

More information about the Distutils-SIG mailing list