poetry-plugin-pypi-mirror
Advanced tools
Poetry plugin that adds support for pypi.org mirrors and pull-through caches
poetry-plugin-pypi-mirror is a plugin for poetry, the Python packaging and dependency manager. It enables poetry to substitute connections to pypi.org with connections to a pypi.org mirror or pull-through cache without requiring project configuration changes. This is ideal for situations where an access-restricted or otherwise unsuitable-for-general-use pypi.org mirror must be used by a subset of project contributors. For example:
These mirrors can be used without this plugin by adding them as project
repositories. However, this
requires the mirror to be included in the project's configuration, and this also
results in source entries for the mirror appearing in poetry.lock. Since only
a subset of project contributors can use these mirrors, that subset of users
would need to replace and remove references to the mirror repository each time
they want to contribute their changes back to the project. This is suboptimal.
Follow poetry's plugin installation instructions, replacing poetry-plugin with poetry-plugin-pypi-mirror.
To specify a mirror, you can either define plugins.pypi_mirror.url in poetry's
configuration, or set
environment variable POETRY_PYPI_MIRROR_URL to the full URL for a PEP
503-compatible mirror. When both are set the
environment variable will be used.
[plugins]
[plugins.pypi_mirror]
url = "https://example.org/repository/pypi-proxy/simple/"
... in either a project's
poetry.toml (for per-project configuration), or the user's config.toml.
POETRY_PYPI_MIRROR_URL=https://example.org/repository/pypi-proxy/simple/ poetry add pendulum
...or...
export POETRY_PYPI_MIRROR_URL=https://example.org/repository/pypi-proxy/simple/
poetry add cleo # uses mirror specified in first line
poetry lock # also uses mirror specified in first line
If the mirror you're using requires authentication, you can add the credentials like you would for any other repository.
Please note that repository names are case-sensitive, so it is important that
you configure the credentials for PyPI. pypi or other variations will not
work.
poetry config http-basic.PyPI <username> <password/token>
poetry-plugin-pypi-mirror depends on poetry internals which can change between poetry releases. It's important to ensure compatibility between the poetry version in use and the plugin version in use.
| Poetry version(s) | Compatible plugin version(s) |
|---|---|
| >= 1.3, < 1.9 | ^0.4.2 |
| ~1.2.1 | < 0.3.0 |
To contribute, open a pull request.
All commits must be signed to be accepted. Your signature certifies that you have the right to submit your contribution(s) to the project, in accordance with the principles described in the Developer Certificate of Origin.
Developer Certificate of Origin
Version 1.1
Copyright (C) 2004, 2006 The Linux Foundation and its contributors.
Everyone is permitted to copy and distribute verbatim copies of this
license document, but changing it is not allowed.
Developer's Certificate of Origin 1.1
By making a contribution to this project, I certify that:
(a) The contribution was created in whole or in part by me and I
have the right to submit it under the open source license
indicated in the file; or
(b) The contribution is based upon previous work that, to the best
of my knowledge, is covered under an appropriate open source
license and I have the right under that license to submit that
work with modifications, whether created in whole or in part
by me, under the same open source license (unless I am
permitted to submit under a different license), as indicated
in the file; or
(c) The contribution was provided directly to me by some other
person who certified (a), (b) or (c) and I have not modified
it.
(d) I understand and agree that this project and the contribution
are public and that a record of the contribution (including all
personal information I submit with it, including my sign-off) is
maintained indefinitely and may be redistributed consistent with
this project or the open source license(s) involved.
To sign your commits, use the template below to generate a signature, and then add that signature to your commit message(s):
Signed-off-by: Your Name <Your.Name@example.com>
You must use your true name. Pseudonyms are not permitted.
If you have set git's user.name and user.email, you can sign commits
easily at commit time using git commit -s.
FAQs
Poetry plugin that adds support for pypi.org mirrors and pull-through caches
We found that poetry-plugin-pypi-mirror demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.
Security News
Research
Socket researchers found a malicious Maven package impersonating the legitimate ‘XZ for Java’ library, introducing a backdoor for remote code execution.