Development Status
- 5 - Production/Stable
Environment
- Web Environment
Intended Audience
- Developers
- System Administrators
Programming Language
- Python
- Python :: 3 :: Only
- Python :: 3.9
- Python :: 3.10
- Python :: 3.11
- Python :: 3.12
- Python :: 3.13
- Python :: 3.14
- Python :: Implementation :: PyPy
Topic
- Internet :: WWW/HTTP :: WSGI :: Application
- Internet :: WWW/HTTP
devpi-server: backend for hosting private package indexes and PyPI on-demand mirrors
PyPI on-demand package mirror
You can point uv, pip or another Python package installer to the root/pypi/+simple/ index, serving as a transparent on-demand mirror for PyPI-hosted packages.
User specific indexes
Each user (which can represent a person, project or team) can have multiple indexes, and can upload packages and documents to these indexes via standard twine or setup.py invocations. Users and indexes can be manipulated through devpi-client and a RESTful HTTP API.
Index inheritance
Each index can be configured to merge in other indexes so that it serves both its uploads and all releases from other index(es). For example, an index using root/pypi as a parent is a good place to test out a release candidate before you push it to PyPI.
Sensible defaults for a low friction deployment
Get started easily and deploy a devpi-server instance with pre-configured templates for nginx and process managers.
Separate tool for Packaging/Testing activities
The complementary devpi-client tool helps to manage users, indexes, logins and typical package upload and installation workflows.
See https://doc.devpi.net on how to get started and further documentation.
Support
If you find a bug, use the issue tracker at Github.
For general questions, use GitHub Discussions or the devpi-dev@python.org mailing list.
For support contracts and paid help, contact mail at pyfidelity.com.
Changelog
6.20.1 (2026-05-11)
Bug Fixes
Pass through request headers when streaming .metadata from mirror. Refs #1018
6.20.0 (2026-04-30)
Features
Add experimental bare bones core-metadata ([PEP 658](https://peps.python.org/pep-0658/), [PEP 714](https://peps.python.org/pep-0714/)) support with --enable-core-metadata command line option and mirror_provides_core_metadata mirror index option. Refs #1018
Bug Fixes
Update replica status when the replica is waiting for new serials using the streaming changelog endpoint.
6.19.3 (2026-04-13)
Bug Fixes
Fix #1112: Parse simple JSON reply even with wrong content-type in reply if the body seems to contain JSON.
Return stale project list for mirrors when the lock can’t be acquired within the timeout.
Fix importing of toxresults from devpi-server 6.5.0 to 6.9.0 where the wrong hash was stored.
6.19.2 (2026-03-17)
Bug Fixes
Preserve log for documentation uploads in export.
Any missing file on mirrors will be ignored during event processing as is already the case in other places.
Use short timeout when project list is requested for has_project call on mirrors instead of the long one used for list_projects. This prevents installers from timing out and retrying several times.
Fix error handling for proxy requests from replica to primary.
Other Changes
Removed limit of reported missing files for devpi-fsck.
6.19.1 (2026-02-09)
Bug Fixes
Pin setuptools as pyramid still requires pkg_resources.
Always allow replicas to access deleted releases to get the proper 410 Gone instead of 403 Forbidden when devpi-lockdown is in use.
Wheel compatibility matrix
Files in release
argon2-cffi
attrs
(>=22.2.0)
defusedxml
devpi_common
(<5,>3.6.0)
httpx
(<1)
itsdangerous
(>=0.24)
lazy
legacy-cgi
passlib[argon2]
platformdirs
pluggy
(<2.0,>=0.6.0)
py
(>=1.4.23)
pyramid
(>=2)
repoze.lru
(>=0.6)
requests
(>=2.3.0)
setuptools
(<=81)
strenum
strictyaml
waitress
(>=1.0.1)
ruamel.yaml