Opportunities › Private Python package repository hosting › Proposed app
Wheelhouse
Private Python package index for your team, set up in minutes, works with pip
- Score
- 42
- confidence 53
- Evidence
- 9
- items on the page
- Rivals
- 6
- named in sources
- First version
- 35 d
- estimate
- Type
- Desktop app
- PWA: runs in the browser, installs on Mac and Windows
- Market since
- 2008
- Mature market · AI estimate
ScreensConcept
Desktop app: Package repository management involves setting up indices, reviewing audit logs, configuring access tokens, and reading security scan results—dense configuration work best handled at a desk. Sample screens on a computer, in the proposed brand. Their numbers are sample data.
New index
Ready to publish3 steps
About this appAI proposal
Wheelhouse is a hosted private index for Python packages. Create an index, push a wheel with twine, and install it with pip from a per-team URL. Your proprietary code stays off public PyPI, and nobody has to run a server.
It is built for small and mid-size Python teams who find big artifact registries heavy and a bare self-hosted server too thin. Access is set per index and per token, and each upload is checked for known vulnerable dependencies.
Wheelhouse does one thing: Python packages. It is not a 40-format universal registry and has no admin console to learn. Setup is one page, and CI tokens are scoped to a single index.
- Tagline
- Your Python packages, kept in your house.
- Voice
- PlainCalmPrecise
- Why this name
- A wheelhouse is where a vessel is steered, and wheels are Python's package format. The name suggests control over your own packages.
In the first version
Members say which features they would use. It tells PWAS what people want; it changes no score.
Standard pip and twine workflow
Uses the normal simple index protocol. Point pip or uv at your index URL and upload with twine. No custom client or build script changes.
No member yet
Index per team or project
Create separate indexes for staging, internal and customer releases. Each has its own members, tokens and retention rules.
No member yet
Scoped CI tokens
Issue read-only or publish-only tokens for one index, with an expiry date. Revoke one in a click when a pipeline is retired.
No member yet
Upload-time vulnerability scan
Each new release is checked for known vulnerable dependencies. Set a rule to quarantine risky versions until someone approves them.
No member yet
Brand identityAI proposal
Check the name against trademark registers before using it.
Palette
#1E6B52Pine · primary#F6F3ECPaper · surface#1F2A30Ink · text#C4552DClay · accent#D9CDB4Sand · borders and data
Typography
Aa
Wheelhouse
ABCDEFGHIJKLMNOPQRSTUVWXYZ 0123456789
Your Python packages, kept in your house.
PricingAI proposal
Verified: Artifactory lists paid plans from $50 to $950 a month; Sonatype Nexus lists $1,200 to $7,500 a year plus a free plan. These tiers sit inside those ranges as a starting point to test.
Free
Free
- 1 private index
- 3 members
- 1 GB storage
- Basic scan
Team
$49 a month
- Unlimited indexes
- 15 members
- 50 GB storage
- Scoped tokens, audit log
Business
$299 a month
- Unlimited members
- 500 GB storage
- Quarantine rules, SSO
- Priority support
What it could be worthEstimate
What a software business making this much sells for today, from real deals. Pick a monthly revenue.
If it makes
Worth about
$194,000
Sale range $132,000 to $263,000
$120,000 a year in revenue
From 87 software businesses listed and sold on Empire Flippers in the last year, revenue vetted by the broker: they sell for about 19× their monthly revenue, most between 13× and 26×.
Measured on profit, the middle deal is 32× monthly net profit: about 2.7 years of profit.
An estimate, not an offer or financial advice. A real price depends on profit, growth, churn, how much of the work is the owner's, and the buyer.
How it would growAI proposal
How the product would reach new customers through its own use, and how the first ones would be found. A plan to test, not a result.
- Built-in loop
- Users invite others. A team invites developers and CI systems to its index. Each new member installs from the index URL and sees the product name in setup docs and pip config.
- Do they become customers?
- Invited developers may start an index at their own company, but many only consume packages. Test how many invitees create a second index elsewhere.
- First customers
- Python teams of 5 to 30 developers at software agencies and small product companies, led by an engineering lead who shares code by git URLs or a self-run server.
- Where to reach them
- Python community forums: Answer private packaging questions in Python forums and subreddits, with a migration guide from a self-run server.
- Technical blog posts: Publish guides on dependency confusion and private indexes for CI, aimed at search traffic.
- First milestone
- Ten teams of 5 to 30 developers move a live project to Wheelhouse and five pay for Team within 60 days.
Why people already pay for this
- VerifiedArtifactory's pricing page lists 2 paid plans, from $50 to $950 a month
- VerifiedGitHub repository gained 1121 stars in 269 days
- Public claimBuilt-in security scanning and vulnerability detection are core features, addressing security concerns in software supply chain management.
- Public claimArtifact Keeper supports 40+ package formats, including Docker, npm, Maven, Cargo, PyPI, Helm, and NuGet, addressing the need for unified artifact storage across diverse technology stacks.
Tech stack
Every proposal builds on the same PWA base, installable from the browser on any phone or computer. Dashed boxes are what this app adds.
- AppNext.js and TypeScript
- PWAManifest and service worker
- UITailwind CSS
- Data and authSupabase Postgres
- PaymentsStripe
- EmailResend
- HostingVercel
- This app · Package storageS3-compatible object storageWheels and sdists are large files that need cheap, durable storage with signed downloads.
- This app · Vulnerability dataPublic advisory database feedUpload-time scans need a regularly updated source of known vulnerabilities.
RisksAI inference
- CommercialFree open-source servers and bundled cloud registries already cover basic needs. Teams may not pay for a hosted index unless setup and security are clearly better.
- Technicalpip, uv and twine differ in edge cases. Index protocol compatibility needs broad testing, and public fallback proxying adds load.
- DataTeams store proprietary code. A leak or access bug would end trust, so isolation and token handling need a security review.
- CommercialLarge registries already cover Python among many formats. A Python-only focus may be too narrow to sustain; this needs testing.
Everything marked AI proposal or AI inference was written by a model from the evidence on the opportunity page. The proposed name must be checked against trademark registers before it is used.