The Python Package Index, reimagined.

pypx is a fast, modern frontend for PyPI — built for developers who want more than a name and a description. Get instant search, dependency trees, download trends, vulnerability data, inline changelogs, and API docs in one place.

pypx.app — inspired by npmx.dev

PyPI.org works — but it feels dated. No instant search, no at-a-glance package insights, no dark mode, no keyboard navigation. pypx layers enriched data and modern UX on top of PyPI's public APIs without scraping or replacing anything.

• Instant search — FTS5-powered fuzzy search across 780K+ packages with typeahead and Cmd+K command palette
• Package insights — install size, wheel platform coverage, Python version compatibility, release cadence
• Dependency tree — parsed PEP 508 requires_dist with required vs. optional extras split out
• Download trends — 4-week, 3-month, and 6-month charts broken down by Python version and OS
• Inline changelogs — GitHub Releases, CHANGELOG.md files, and GitLab Releases rendered as markdown
• Security advisories — OSV database CVE data per package, shown on the versions timeline
• API docs — extracted in-process from published wheels via goopy: modules, function signatures, docstrings
• Install command switcher — pip, uv, poetry, and pipx commands with one-click copy
• Dark-first terminal aesthetic — Geist fonts, zinc palette, full keyboard navigation
• SSR + edge caching — fast initial loads via Nuxt SSR, Cloudflare edge caching for repeat visits

git clone https://github.com/mattstrayer/pypx.git
cd pypx
cp .env.example .env        # add GITHUB_TOKEN for higher rate limits (optional)
docker compose up --build

Visit http://localhost.

On first boot the background worker syncs the full PyPI package index (~780K packages). Search results populate within a few minutes.

In Docker Compose, NUXT_API_BASE is automatically set to the internal http://api:8080 address. You only need to provide DOMAIN, GITHUB_TOKEN, and optionally GITLAB_TOKEN in your .env.

Browser → Cloudflare → Caddy → Nuxt SSR    (port 3000)
                             → Go API      (port 8080)

• Go API — chi-based HTTP server. Orchestrates PyPI, pypistats, GitHub, GitLab, OSV, and conda-forge. Two-tier cache (LRU memory + SQLite). Background worker syncs 780K+ package names into an FTS5 search index every 6 hours. API doc extraction runs in-process via goopy (pure Go wheel parser).
• Nuxt 4 — SSR frontend in Vue 3 + Tailwind 4. Critical data fetched server-side; secondary data (changelog, security, docs) loaded in parallel client-side after render.
• Caddy — automatic TLS, routes /api/* to Go API, everything else to Nuxt.
• Cloudflare — edge caching, DDoS protection, bot management.

Full architecture documentation: docs/architecture/

Prerequisites: Go 1.26+, Node.js 20+ with pnpm, Docker + Compose

# Go API
cd api && go run ./cmd/server

# Nuxt frontend (separate terminal)
cd web && pnpm install && pnpm run dev

# Run tests
cd api && go test ./...
cd web && pnpm run test

The Nuxt dev server proxies /api/* to localhost:8080 automatically (via docker-compose.override.yml which configures local development proxying).

Pull requests, bug reports, and feature ideas are all welcome. Start with CONTRIBUTING.md for setup and conventions, and please read the Code of Conduct before participating.

• File bugs or feature requests via GitHub Issues
• Commit messages and PR titles follow Conventional Commits: feat:, fix:, refactor:, docs:, chore:, test:
• One logical change per PR; run go test ./... and pnpm run test before pushing

To report a security vulnerability, follow the disclosure process in SECURITY.md — please do not open a public issue.

pypx stands on a lot of public infrastructure. Huge thanks to the maintainers of:

• PyPI and the Python Packaging Authority — package metadata and the simple index
• pypistats.org — aggregated download statistics
• OSV.dev — open-source vulnerability database
• conda-forge — community-maintained Conda channel
• hugovk/top-pypi-packages — Hugo van Kemenade's top-PyPI-packages dataset
• GitHub and GitLab — release notes, READMEs, and repository metadata
• Geist — typography
• Inspiration from npmx.dev

pypx is not affiliated with the Python Software Foundation, the Python Packaging Authority, or any of the services it consumes.

MIT