cloudsmith-cli
Cloudsmith Command-Line Interface (CLI)
What it is and what it does
Cloudsmith CLI is a Python 3 text-based interface to the Cloudsmith package repository API, allowing teams to automate package management workflows without building custom integrations. It supports uploading, downloading, copying, and deleting packages across multiple formats (Python, npm, Docker, Maven, Debian, RPM, and many others), plus managing repositories, entitlements, metadata, and policies programmatically.
The tool is designed for DevOps automation and system administration tasks. It handles authentication via login, API keys, or keyring storage, and provides subcommands for nearly every operation available through the web API—from listing distributions and packages to managing quarantines, quotas, and vulnerability policies. With 17 runtime dependencies including click for CLI scaffolding, requests for HTTP, and rich for terminal output, it trades a moderate dependency footprint for a polished, feature-complete command-line experience.
Use it for:
- Automate package uploads in CI/CD pipelines for multiple package formats without writing format-specific scripts.
- Manage repository entitlements and access tokens programmatically across an organization.
- Promote or copy packages between repositories as part of release workflows.
- Query package metadata, dependencies, and vulnerability information from the command line.
- Integrate Cloudsmith operations into shell scripts or infrastructure-as-code tools.
- Retrieve bandwidth and storage metrics for repositories and entitlement tokens.
Worth the install?
AI-flagged interpretation of the facts on this page — verify before relying
A command-line interface to the Cloudsmith package repository API, enabling users to manage packages, repositories, entitlements, and metadata across multiple package formats without writing custom integrations.
Yes. The package is actively maintained, carries no known vulnerabilities, supports current Python versions, and has low install friction. It is well-suited for teams already using Cloudsmith who need to automate package management or integrate repository operations into CI/CD and DevOps workflows. The permissive Apache-2.0 license poses no restrictions.
Install
cloudsmith-cli on PyPI
pip
pip install cloudsmith-cliuv
uv add cloudsmith-clipoetry
poetry add cloudsmith-cliInstalling cloudsmith-cli
Before you install
Low install friction with a pure Python wheel distribution. Active maintenance with a release on 2026-08-14 and recent commits. Supports current Python versions (3.10–3.14) and carries 17 runtime dependencies including click, requests, and keyring for credential handling.
License in practice
Licensed under Apache-2.0 (permissive), allowing free use, modification, and distribution with minimal restrictions—suitable for both commercial and open-source projects.
Quickstart
pip install cloudsmith-cli
cloudsmith --version
cloudsmith login
cloudsmith push python ./my-package.tar.gz my-org/my-repo
Requires Python 3.10 or later. API credentials (via login or CLOUDSMITH_API_KEY environment variable) needed for most operations.
Verify before relying
- Whether the 17 runtime dependencies introduce any transitive security concerns beyond the 0 known OSV vulnerabilities in cloudsmith-cli itself.
- Performance characteristics when managing large numbers of packages or repositories.
- Whether keyring integration works reliably across all supported platforms (Linux, macOS, Windows).
Package facts
| License | Apache-2.0 (permissive) |
| Python support | supports the current Python release (>=3.10.0) |
| Install friction | low — pure-Python wheel |
| Runtime dependencies | 17 — click, click-configfile, click-didyoumean, click-spinner, json5, cloudsmith-api, keyring, keyrings-alt, keyrings-cryptfile, mcp, PyJWT, python-toon, requests, requests_toolbelt, rich, semver, urllib3 |
| Maintenance | actively maintained — 0 days since the last release |
| Last repo commit | |
| First released | |
| Downloads | 370,209/month — #7,182 on PyPI (30-day window, as of 2026-08-14) |
| Known vulnerabilities | none known (OSV.dev, checked 2026-08-14) |
Evidence: cloudsmith_cli-1.23.0-py3-none-any.whl
Keywords: cloudsmith, cli, devops
Tags
More Internet packages
Botocore provides low-level, data-driven access…
permissive · top 100 on PyPI
aiobotocoreProvides an async client for AWS services using…
permissive · top 100 on PyPI
pydanticPydantic validates Python data structures…
permissive · top 100 on PyPI
filelockProvides a platform-independent file locking…
permissive · top 100 on PyPI
fastapiFastAPI is a Python web framework for building…
permissive · top 100 on PyPI
googleapis-common-protosProvides common Protocol Buffer message…
permissive · top 100 on PyPI
cloudsmith-apiProvides Python bindings to the Cloudsmith API…
unclear · top 15,000 on PyPI
ms-fabric-cliA command-line interface for Microsoft Fabric…
unclear · top 15,000 on PyPI
pephubclientPEPHubClient provides a Python API and…
permissive · top 15,000 on PyPI
b2Command-line interface for managing files,…
permissive · top 15,000 on PyPI
speedtest-cliCommand-line tool that measures internet…
permissive · top 15,000 on PyPI
devpi-clientdevpi-client is a command-line tool for…
permissive · top 15,000 on PyPI
codecov-cliA command-line interface for interacting with…
unclear · top 5,000 on PyPI
ansible-signGenerates and validates checksums and GPG…
permissive · top 15,000 on PyPI
azure-cli-acrProvides the Azure CLI 'acr' command module for…
permissive · top 15,000 on PyPI
awscliv2Provides a Python wrapper around AWS CLI v2,…
permissive · top 15,000 on PyPI