
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
pypi-command-line
is a colorful, powerful, and beautiful command line interface for pypi.org that is actively maintained
Detailed Documentation available at https://wasi-master.github.io/pypi-command-line/
flask-.+
will show all flask extensions.browse
,
information
,
description
,
search
,
wheels
,
releases
,
largest-files
,
regex-search
,
version
,
cache-info
,
cache-refresh
,
cache-clear
,
new-packages
,
new-releases
,
read-the-docs
)I've included both PePy and PyPIStats since PyPIStats by default does not include mirrors in it's count1. Also see https://github.com/psincraian/pepy/issues/351
Period | From PePy | From PyPiStats |
---|---|---|
Day | ||
Week | ||
Month | ||
Total |
Title | Badge |
---|---|
Version | |
Wheel availability | |
Supported python versions | |
Python Implementation |
Title | Badge |
---|---|
Number of issues open | |
Number of issues closed | |
Number of pull requests | |
Number of stars |
Title | Badge |
---|---|
Documentation status | |
Lines of code |
Command name and parameter autocompletion
Smart error handling
Auto command aliases
Search feature that gives the same results as on PyPI
See detailed information about a project
View the project description right in your terminal with rich Markdown and reStructuredText formatting
View the project readme from github
Search for packages using regular expressions
Open the package's URLs gotten from PyPI
See the project information with classifiers
See the all time largest projects in PyPI
Install autocompletion for the current shell
See the source code for the autocompletion
See a specific page of the search results
Installing from PyPI (recommended).
pip install pypi-command-line
If you want to also install speed dependencies
pip install "pypi-command-line[speedups]"
Installing from source.
pip install git+https://github.com/wasi-master/pypi-command-line.git
If you want to also install speed dependencies
pip install "pypi-command-line[speedups] @ git+https://github.com/wasi-master/pypi-command-line.git"
To see all the available commands use:
pypi --help
For more information on a certain command use pypi <command_name> --help
. For example,
pypi search --help
For a full guide see https://wasi-master.github.io/pypi-command-line/usage.
Now this probably was the best option before pypi-command-line
came out and it does have some flaws. The information
command of pypi-cli is pretty minimal, there's no way of seeing the github information, The download count doesn't work properly, the long descriptions aren't formatted at all with pypi-cli. pypi-cli uses the xml-rpc[?] API that is discontinued So the search feature doesn't work anymore, . The stat command is broken and is badly formatted for screens that are not ultra wide. And the project is unmaintained and archived
TL;DR The stat
and search
commands don't work anymore, the information command kinda works but the download count doesn't work, can't see github information, descriptions are raw.
So this can just search for packages on pypi and that's it. Now don't you think that this is inherently bad as per se. So I tried it out immediately and it just got stuck loading the packages, pypi-client gets names of all the packages that exist pypi‾ which took like 4 mins, then I assume it downloads the github stars data?‾ Which takes like another 3 mins and then It just asked me to authorize with github… like why does pypi-client even need authorization from me since github has a public api. And then it showed this which isn't really unreadable just badly formatted for screens that are not ultra wide. by changing the font size a bit I could make it look like this which still isn't bad just a bit convoluted. And even at the end of the day the results are manually searched through therefore different from pypi‾
TL;DR: Takes too long (≈7 mins), Needs github authorization, badly formatted for non ultra wide monitors, searches manually so results are different compared to pypi
Discontinued 9 years ago, only supports python 2. Uses flags instead of subcommands for everything.
TL;DR: Is this really necessary?
So, this library is most likely the best alternative for pypi-command-line. But the output is in json, uses the xml-rpc api for search which is discontinued, the readme command doesn't work for me, the list command doesn't have a progressbar
TL;DR: Output is only in json, without color. The search command doesn't work anymore. Has no progressbar for long running tasks
FAQs
A beautiful command line interface for the Python Package Index
We found that pypi-command-line demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.