# \#pypi **URL:** https://community.sonatype.com/tag/pypi/89.md [Latest](https://community.sonatype.com/latest.md) · [Categories](https://community.sonatype.com/categories.md) · [Tags](https://community.sonatype.com/tags.md) --- ## [Nexus 3 as a Pypi mirror - how do I get the \*\*json\*\* data for a given package?](https://community.sonatype.com/t/nexus-3-as-a-pypi-mirror-how-do-i-get-the-json-data-for-a-given-package/13448)
**Author:** [@mfalatic](https://community.sonatype.com/u/mfalatic)\ **Replies:** 6\ **Last updated:** [June 15, 2026, 1:17pm UTC](https://community.sonatype.com/t/nexus-3-as-a-pypi-mirror-how-do-i-get-the-json-data-for-a-given-package/13448 "2026-06-15T13:17:25Z")
Using uv as an example… If I go to Links for uv I get a simple list of links to just artifacts (no metadata) If I go there with header Accept: application/vnd.pypi.simple.v1+json I get a json output with metadata (part… --- ## [Repository Firewall Best Practices: Policy Compliant Component Selection](https://community.sonatype.com/t/repository-firewall-best-practices-policy-compliant-component-selection/12225)
**Author:** [@jzora](https://community.sonatype.com/u/jzora)\ **Replies:** 6\ **Last updated:** [September 24, 2024, 3:29pm UTC](https://community.sonatype.com/t/repository-firewall-best-practices-policy-compliant-component-selection/12225 "2024-09-24T15:29:25Z")
Protecting yourself from software supply chain attack with Sonatype Repository Firewall is a bit of a balancing act. Quarantining components protects you from risk, but it also creates some development friction. Quaranti… --- ## [\*UNKNOWN org.sonatype.nexus.repository.httpbridge.internal.ViewServlet](https://community.sonatype.com/t/unknown-org-sonatype-nexus-repository-httpbridge-internal-viewservlet/10712)
**Author:** [@david.ta](https://community.sonatype.com/u/david.ta)\ **Replies:** 3\ **Last updated:** [August 3, 2023, 9:55am UTC](https://community.sonatype.com/t/unknown-org-sonatype-nexus-repository-httpbridge-internal-viewservlet/10712 "2023-08-03T09:55:30Z")
I’ve tried to simulate issues we had on production using a new instance of nexus. The flow: After installation - create 3 pip repos a. pypi hosted b. pypi proxy - from pypi.org c. pypi group - which includes pypi … --- ## [Proxying PyPi and prefetching index](https://community.sonatype.com/t/proxying-pypi-and-prefetching-index/9994)
**Author:** [@atharva.inamdar](https://community.sonatype.com/u/atharva.inamdar)\ **Replies:** 6\ **Last updated:** [January 27, 2023, 9:23pm UTC](https://community.sonatype.com/t/proxying-pypi-and-prefetching-index/9994 "2023-01-27T21:23:07Z")
I’m trying to proxy https://alpine-wheels.github.io/index repository as a PyPi proxy. However it doesn’t support /simple endpoint. Is there a workaround for such repos? is it possible for nexus to pre-fetch the index wi… --- ## [Duplicate component on pypi repo one in capital and one with lowercase - trying to delete one getting null error](https://community.sonatype.com/t/duplicate-component-on-pypi-repo-one-in-capital-and-one-with-lowercase-trying-to-delete-one-getting-null-error/9531)
**Author:** [@david.ta](https://community.sonatype.com/u/david.ta)\ **Replies:** 1\ **Last updated:** [October 31, 2022, 3:46pm UTC](https://community.sonatype.com/t/duplicate-component-on-pypi-repo-one-in-capital-and-one-with-lowercase-trying-to-delete-one-getting-null-error/9531 "2022-10-31T15:46:24Z")
I’m running nexus on docker- and someone pushed 2 components to my hosted PyPI. One with lowercase like xxxx and one with uppercase XxXx. not sure why that happened - but now we want to delete only the lowercase (xxxx) a… --- ## [Hosted PyPI repository /simple interface does not provide SHA256 hashes](https://community.sonatype.com/t/hosted-pypi-repository-simple-interface-does-not-provide-sha256-hashes/4325)
**Author:** [@james.l.brophy](https://community.sonatype.com/u/james.l.brophy)\ **Replies:** 12\ **Last updated:** [September 22, 2022, 6:42am UTC](https://community.sonatype.com/t/hosted-pypi-repository-simple-interface-does-not-provide-sha256-hashes/4325 "2022-09-22T06:42:25Z")
We are using Sonatype Nexus Repository Manager (OSS 3.21.1-01) to provide a hosted PyPI repository. Is there a way to make the Nexus hosted PyPI repository provide SHA256 hashes in the /simple web interface’s href attri… --- ## [Path to the .whl file on the local server](https://community.sonatype.com/t/path-to-the-whl-file-on-the-local-server/9254)
**Author:** [@youna](https://community.sonatype.com/u/youna)\ **Replies:** 1\ **Last updated:** [September 6, 2022, 6:56pm UTC](https://community.sonatype.com/t/path-to-the-whl-file-on-the-local-server/9254 "2022-09-06T18:56:16Z")
Hi, Everyone I am currently testing the version of Nexus 3.37-3-02 installed in the redhat 8.4 OS. I received a pypi repo event call back using webhook, and I am looking for the created file. Pypi event callback is as f… --- ## [Nexus 3 pypi isn't accessible (for pip) without authentication](https://community.sonatype.com/t/nexus-3-pypi-isnt-accessible-for-pip-without-authentication/3832)
**Author:** [@jaikiran](https://community.sonatype.com/u/jaikiran)\ **Replies:** 10\ **Last updated:** [August 23, 2022, 3:21pm UTC](https://community.sonatype.com/t/nexus-3-pypi-isnt-accessible-for-pip-without-authentication/3832 "2022-08-23T15:21:39Z")
I am using the latest Nexus 3 OSS installation 3.22.0-02. I am experimenting with its support for pypi repositories and created a “hosted” pypi repo as per the available documentation. I was able to successfully upload a… --- ## [HTML5 index page needed for PIP](https://community.sonatype.com/t/html5-index-page-needed-for-pip/8162)
**Author:** [@ryan](https://community.sonatype.com/u/ryan)\ **Replies:** 1\ **Last updated:** [February 2, 2022, 5:24pm UTC](https://community.sonatype.com/t/html5-index-page-needed-for-pip/8162 "2022-02-02T17:24:40Z")
Recently we have been getting the following message: DEPRECATION: The HTML index page being used (https://xxxxx.zzz/repository/PIP-Proxy/simple/python-dateutil/) is not a proper HTML 5 document. This is in violation of… --- ## [How would I create a proxy for a pypi that uses /+simple instead of /simple?](https://community.sonatype.com/t/how-would-i-create-a-proxy-for-a-pypi-that-uses-simple-instead-of-simple/7378)
**Author:** [@henryborchers](https://community.sonatype.com/u/henryborchers)\ **Replies:** 1\ **Last updated:** [October 4, 2021, 1:48pm UTC](https://community.sonatype.com/t/how-would-i-create-a-proxy-for-a-pypi-that-uses-simple-instead-of-simple/7378 "2021-10-04T13:48:13Z")
I’m trying to integrate (as a stepping stone to migrate) a number of number of pypi repository indexes that are using a Devpi server into our Nexus server. However, as far as I can tell, Nexus expects all pypi endpoints… --- ## [When does Nexus 3 generate the simple index for pypi repositories?](https://community.sonatype.com/t/when-does-nexus-3-generate-the-simple-index-for-pypi-repositories/5260)
**Author:** [@sonatype-nexus](https://community.sonatype.com/u/sonatype-nexus)\ **Replies:** 6\ **Last updated:** [April 12, 2021, 6:30pm UTC](https://community.sonatype.com/t/when-does-nexus-3-generate-the-simple-index-for-pypi-repositories/5260 "2021-04-12T18:30:12Z")
I roughly scanned the sources of the nexus-repository-pypi plugin and found PyPiHostedFacetImpl#getRootIndex() which eventually generates a simple-html-index-file. But I couldn’t find, where this is called. How is the i… --- ## [How to lock down historical Python packages and prevent their installation?](https://community.sonatype.com/t/how-to-lock-down-historical-python-packages-and-prevent-their-installation/4208)
**Author:** [@matthew.s.edmondson](https://community.sonatype.com/u/matthew.s.edmondson)\ **Replies:** 0\ **Last updated:** [May 13, 2020, 5:35pm UTC](https://community.sonatype.com/t/how-to-lock-down-historical-python-packages-and-prevent-their-installation/4208 "2020-05-13T17:35:37Z")
Hello, I am wanting to lock down old versions of a given Python package and prevent the “pip install” of that package. I want to do this to keep a history of these packages, but prevent anything from installing that ver… --- ## [What APIs can I use to find Python Package information such as release date of Python Package?](https://community.sonatype.com/t/what-apis-can-i-use-to-find-python-package-information-such-as-release-date-of-python-package/3303)
**Author:** [@matthew.s.edmondson](https://community.sonatype.com/u/matthew.s.edmondson)\ **Replies:** 0\ **Last updated:** [January 15, 2020, 3:58pm UTC](https://community.sonatype.com/t/what-apis-can-i-use-to-find-python-package-information-such-as-release-date-of-python-package/3303 "2020-01-15T15:58:26Z")
What APIs can I use to find Python Package information, such as release date of Python Package? I would also like to find APIs to get information on Maven Java artifacts, such as the release date of the artifacts. --- ## [Pypi SSL proxy not working](https://community.sonatype.com/t/pypi-ssl-proxy-not-working/2350)
**Author:** [@ryan.bannon](https://community.sonatype.com/u/ryan.bannon)\ **Replies:** 4\ **Last updated:** [August 16, 2019, 4:54pm UTC](https://community.sonatype.com/t/pypi-ssl-proxy-not-working/2350 "2019-08-16T16:54:49Z")
Hello, Banging my head on this one. Trying to connect to a pypi proxy I’ve setup. Keep on getting ERROR: Could not find a version that satisfies the requirement aws2 (from versions: none) ERROR: No matching distributio…