---
id: oras
version: "0.2.43"
license: LICENSE
license_treatment: permissive
maintenance: active
---

# oras — OCI Registry as Storage Python SDK

License: permissive · Maintenance: active · Downloads: 2.4M/mo

## What it is and what it does

ORAS Python is a Python SDK for working with OCI Artifacts in OCI Conformant registries. It enables developers to programmatically push artifacts to registries from within Python applications, treating the registry as a storage backend. The package depends on jsonschema for validation and requests for HTTP communication with registries.

The library is designed for developers who need to integrate artifact storage into Python workflows, particularly in containerized or cloud-native environments where OCI registries serve as centralized artifact storage. It abstracts the complexity of OCI registry APIs behind a Python-friendly interface.

Use it for:

- Push custom artifacts or configurations to an OCI registry from a Python application or CI/CD pipeline
- Integrate artifact storage into Python-based deployment or build automation tools
- Store and retrieve non-container artifacts (documents, models, binaries) in OCI registries
- Build Python tools that interact with OCI-conformant registries as a storage backend

## Worth the install?

AI-flagged interpretation of the facts above — verify before relying.

ORAS Python is an SDK that lets you push OCI Artifacts to OCI Conformant registries, treating them as storage from Python applications.

Yes, if you need to push OCI Artifacts to registries from Python. The package has low install friction, active maintenance, no known vulnerabilities, and permissive licensing. It's well-positioned in the top 5000 PyPI packages by download volume, indicating real-world adoption.

## Install

pip install oras
uv add oras
poetry add oras

## Installing oras

Before you install: Low install friction with only two lightweight runtime dependencies (jsonschema and requests). Active maintenance with a release 6 days ago and ongoing commits.

License in practice: Licensed under Apache 2.0 (permissive), allowing commercial and private use with minimal restrictions.

Quickstart:

pip install oras

import oras
# Use oras to push OCI artifacts to a registry

Verify before relying:

- Whether the package supports Python versions beyond 3.7, given classifiers list 3.7 but requires_python is unspecified
- What specific OCI registry implementations are tested or recommended for compatibility

## Package facts

- License: LICENSE (permissive)
- Python support: unspecified
- Install friction: low
- Maintenance: active
- Downloads: 2.4M/month (top 5,000 on PyPI)
- Known vulnerabilities: none known

## Tags

OCI artifact push registry, OCI registry storage python, push artifacts to registry, OCI conformant registry client, container registry artifact upload, OCI storage SDK, registry as storage python, oci-registry, artifact-storage, container-native

[View on SkillFed](https://skillfed.io/packages/oras) · [View on PyPI](https://pypi.org/project/oras/)