SaaSHub helps you find the best software and product alternatives Learn more →
Top 20 Python Package Management Projects
-
Project mention: notatallshaw/nab: PubGrub-based dependency resolver for Python packages | news.ycombinator.com | 2026-09-11
Relevant pip issue: "Replace resolvelib with nab-resolve to do dependency resolution" @ https://github.com/pypa/pip/issues/13993
This would be a pretty big upgrade to pip and one that I'm looking forward to.
-
AppSignal
Monitoring that respects your time & budget. APM, error tracking, and dashboards for modern web apps. Ten-minute setup, transparent flat pricing, and support from engineers who actually use the product.
-
-
Project mention: Postmortem: AI Incident Classifier Failed Due to Biased Training Data and Scikit-Learn 1.5 | dev.to | 2026-05-05
Use dependency pinning tools like Poetry (https://github.com/python-poetry/poetry) or pip-tools (https://github.com/jazzband/pip-tools) to lock all transitive dependencies, not just top-level ones. Before upgrading any ML library, audit the release notes for breaking changes to default parameters: Scikit-Learn maintains a detailed changelog at https://scikit-learn.org/stable/whats\_new.html. For critical pipelines, add a pre-commit hook that checks for unpinned dependencies or unrecognized default parameters. We reduced our dependency-related incidents by 92% after implementing this practice.
-
conda
A system-level, binary package and environment manager running on all major operating systems and platforms.
-
-
safety
Safety checks Python dependencies for known security vulnerabilities and suggests the proper remediations for vulnerabilities detected.
-
-
SaaSHub
SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives
-
purl-spec
A minimal specification for purl aka. a package "mostly universal" URL, join the discussion at https://gitter.im/package-url/Lobby
Project mention: Reconciling 15 OSS Vulnerability Databases: What They Actually Cover | dev.to | 2026-04-09vuln_id is the primary identifier that source uses — a GHSA-xxxx, CVE-xxxx, PYSEC-xxxx, RUSTSEC-xxxx, GO-xxxx, or MAL-xxxx. aliases is a semicolon-joined list of cross-database identifiers the source knows about. purl is the Package URL — a canonical string like pkg:pypi/tensorflow or pkg:maven/io.grpc/grpc-protobuf that uniquely names a package across every public ecosystem.
-
-
-
-
-
WinGetty
An open source REST Backend for creating a private WinGet Repo without any cloud dependency.
-
-
-
-
publishing-python-packages
Examples and exercises for Publishing Python Packages from Manning Books 🐍 📦 ⬆️
-
-
-
-
SaaSHub
SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives
Python Package Management discussion
Python Package Management related posts
-
notatallshaw/nab: PubGrub-based dependency resolver for Python packages
-
Python 3.14 garbage collection rigamarole
-
Open Source Security at Astral
-
How uv got so fast
-
Uv is the best thing to happen to the Python ecosystem in a decade
-
PyPI mirror proxy that injects code and bypasses pip hash verification
-
Python: The Documentary
-
A note from our sponsor - SaaSHub
www.saashub.com | 12 Oct 2026
Index
What are some of the best open-source Package Management projects in Python? This list will help you:
| # | Project | Stars |
|---|---|---|
| 1 | pip | 10,292 |
| 2 | PDM | 8,664 |
| 3 | pip-tools | 8,007 |
| 4 | conda | 7,530 |
| 5 | pypiserver | 2,070 |
| 6 | safety | 1,999 |
| 7 | conan-center-index | 1,229 |
| 8 | purl-spec | 1,117 |
| 9 | rez | 1,096 |
| 10 | termux-create-package | 508 |
| 11 | patchman | 456 |
| 12 | opi | 290 |
| 13 | WinGetty | 275 |
| 14 | Curdling | 274 |
| 15 | electric | 245 |
| 16 | Winget-Repo | 130 |
| 17 | publishing-python-packages | 100 |
| 18 | pacwatch | 25 |
| 19 | pacmangr | 12 |
| 20 | pip-abandoned | 9 |