PyPI

Returns the PEP 691 Simple API document for a project: the complete ordered versions array, the project-status block (active, quarantined or archived), and every distribution file ever uploaded with its download URL, size, upload-time, hashes, requires-python, yanked flag, PEP 658 core-metadata digests and PEP 740 provenance URL when one exists.

Returns the full PyPI record for a project: an info block (summary, author, license, classifiers, requires_dist, requires_python, project_urls, yanked state), current owners and maintainers under ownership.roles, OSV vulnerabilities affecting the latest release, the latest release's files under urls, and the whole release history under the deprecated releases map.

Returns the PEP 740 provenance object for one uploaded distribution file: the attestation bundles with their Sigstore signatures, signing certificates and Rekor transparency-log entries, each bundled with the Trusted Publisher identity (for example the GitHub repository and workflow) that produced the file.

Returns the PyPI record for one pinned version of a project: that version's info block, the vulnerabilities known to affect that specific version, and only the sdist and wheel files published under it, each with URL, size, packagetype, python_version, SHA256/MD5/BLAKE2b digests, core-metadata digests and ISO upload timestamp.

Returns PyPI's own repository-wide storage figures: total_packages_size, the total bytes of all hosted distribution files, and top_packages, the 100 projects consuming the most storage, each with its size in bytes.