Install Python packages

Sign in once, then let rvs select the repository URL and provide temporary authentication to the Python client.

Install with pip through rvs

Avoid a token-bearing command line with rvs. After rvs auth login, select the private repository once:

rvs art select namespace/packages
rvs pip install internal-sdk

Or use the Ravenstash-oriented helper:

rvs art select namespace/packages
rvs art pypi install internal-sdk

Both approaches delegate installation to pip with authentication limited to the child process.

Install with uv

Use the same repository target with the uv wrapper:

rvs art select namespace/packages
rvs uv pip install internal-sdk

rvs keeps the Ravenstash URL and credential out of committed project configuration.

Choose index behavior carefully

If a private mirror is connected, eligible public dependencies resolve through the same selected Ravenstash target. One protected source avoids the ambiguous multi-index behavior that can lead to dependency-confusion attacks.

Verify the source

Use verbose client output when troubleshooting:

rvs art select namespace/packages
rvs pip install --verbose internal-sdk==1.2.3

The downloaded file URL should use pypi.rvsta.sh.

rvs obtains the repository URL from the selected target and limits authentication to the command it launches.