npm vs PyPI

npm is a JavaScript package registry and command-line tool for sharing code and managing packages. The Registry and CLI are free for public package use, and the Free plan lets public package authors publish unlimited public packages. npm accepts package.json folders, gzipped tarballs, URLs, name-and-version or name-and-tag references, and Git URLs. Its tools support dependency resolution, lockfiles, workspaces, private registry authentication, and offline installation. It runs on Linux, macOS, Windows, and other operating systems through Node.js installers or version managers. For private packages, the Paid user account plan is $7 a month; Pro is also $7 a month for individual creators, while Teams is $7 per user per month for teams and organizations. Pro includes unlimited private packages and package-based permissions; Teams adds team-based permissions. Organizations can manage members, teams, roles, permissions, and package access. All plans include basic support and automatic security warnings. Paid billing starts when card details are submitted, with the first month charged immediately.

PyPI is a repository for software written in Python, available through its website and APIs. It helps users find and install packages shared by the Python community, while package authors publish projects and releases. A release may include source archives and binary wheels for different hardware, operating systems, and formats. APIs include RSS feeds for new packages and releases. PyPI is maintained by the Python Software Foundation and the Python community. Accounts require two-factor authentication, and a verified email address is needed to register a project or upload a release file. Trusted Publishing uses OpenID Connect short-lived identity tokens, with PyPI API tokens valid for 15 minutes. Default limits are 100 MB per file and 10 GB per project. Organizations provide shared profiles, teams, permissions, trusted publishing, and history. Community organizations are free; Company organizations cost $5 a month.