Existing repositories Add TODO

Repository monitor

This is the default repository. It is used to capture and monitor installation of the dependencies.

  • Attached repository policies:
  • Default action: ALLOW all other packages
Repository whitelist

The most strict repository. Allows installation of only whitelisted packages. Everything else is blocked.

  • Attached repository policies:
  • "ALLOW" from list allowed: Default list of allowed packages
  • "BLOCK" from list blocked: Default list of blocked packages
  • "BLOCK" from list pypa_advisory: Vulnerable packages from the Python Packaging Advisory Database. This audit policy is automatically synced
  • Default action: BLOCK all other packages
Repository blacklist

Allows installation of all packages by default. Blacklisted packages are blocked.

  • Attached repository policies:
  • "ALLOW" from list allowed: Default list of allowed packages
  • "BLOCK" from list pypa_advisory: Vulnerable packages from the Python Packaging Advisory Database. This audit policy is automatically synced
  • "BLOCK" from list blocked: Default list of blocked packages
  • Default action: ALLOW all other packages

Usage:

  • pip install --index-url https://ambience.sourcecode.ai/repository/<repository_name>/ package1 package2 ...
  • easy_install --index-url https://ambience.sourcecode.ai/repository/<repository_name>/ package1 package2 ...

Existing audit policies Add TODO

Audit policy pypa_advisory View

Vulnerable packages from the Python Packaging Advisory Database. This audit policy is automatically synced

  • This audit policy contains: 124163 packages
Audit policy yanked View

Yanked packages and releases. This audit policy is automatically synced to contain all yanked packages from the PyPI repository

  • This audit policy contains: 57 packages
Audit policy blocked View

Default list of blocked packages

  • This audit policy contains: 20 packages
Audit policy allowed View

Default list of allowed packages

  • This audit policy contains: 0 packages