Building a Sustainable Python Package Index
summary
PyPI is the canonical but wild west package registry that actually runs on Python 3, Pyramid, Postgres, Redis, Kubernetes with a CDN fronting almost everything. It serves 160 billion requests, transfers ~2 PB a year and sees 6–7k requests per second. The codebase has 100% test coverage, recent features shipped include API tokens and two factor authentication, and the Warehouse rewrite ships after a $170k Mozilla grant with follow‑on $80k and $100k grants for security work.
AI-written summary · about
chapters (9)
- 0:00Introduction
- 1:33What does PIPI do
- 2:54History of PIPI
- 5:05How to build a PIPI
- 7:22Longevity
- 12:12Organizational Stability
- 14:09Financial Stability
- 18:29Sustainability
- 20:22QA
related talks
10mPyPI Supply Chain Security
35mImproving CI/CD Process for Cloud Native Python Applications with PyPI Cloud
23mExploring the Cheese Shop - What's in the Python Package Index?
52mKeynote - Ee Durbin
27mPSF Welcome
32mReinventing the Wheel: A Community-Driven Roadmap for Python Packaging
24mInside the Cheeseshop:How Python Packaging Works
35mSecuring Python projects Supply Chain