SHSelfHostIndex
DE

Devpi

Private PyPI server and packaging caching proxy

Developer Tools & Git ★ 1.2k stars Medium setup MIT

devpi is an open-source PyPI-compatible server and packaging system that provides a private Python package index with caching and staging. It is widely self-hosted for internal Python package distribution.

Official siteSource code

Key features

  • Private PyPI index
  • Upstream caching mirror
  • Staging indexes
  • Web interface

Strengths

  • Released under the MIT license
  • First-class Docker support for quick deployment
  • Active community (1.2k GitHub stars)
  • Written in Python

Is Devpi secure?

OSV.dev lists 1 published advisory for Devpi. It doesn't publish GitHub releases we can match, so we can't say which of them apply to the current version. No known vulnerabilities is not proof of security: it means none have been publicly catalogued.

  • Most recent fixed advisory CVE-2026-54723, published 2026-09-14 (30 days ago), fixed in 6.20.2

Source: OSV.dev, checked 2026-10-14. How this is measured.

Devpi replaces

Self-hosted JFrog Artifactory alternatives

Health badge

Maintain Devpi? Add its health score to your README. The badge links back to this page.

SelfHostIndex: 79 · good

Markdown
[![SelfHostIndex health score for Devpi](https://selfhostindex.com/badge/devpi.svg)](https://selfhostindex.com/app/devpi/)
HTML
<a href="https://selfhostindex.com/app/devpi/"><img src="https://selfhostindex.com/badge/devpi.svg" alt="SelfHostIndex health score for Devpi"></a>
reStructuredText
.. image:: https://selfhostindex.com/badge/devpi.svg
   :alt: SelfHostIndex health score for Devpi
   :target: https://selfhostindex.com/app/devpi/

The score is recomputed on every nightly rebuild from public repository data — see how it is calculated.

Similar developer tools & git apps