pytorch
Decision gist · record as of 2026-08-14
No. This package is abandoned, misdirected, and superseded by 'torch'. It has known vulnerabilities (GHSA-63cw-57p8-fm3p, PYSEC-2026-1856), unclear licensing, and high install friction. Install 'torch' instead.AI-flagged interpretation of the facts on this page — verify before relying
Before you install
- This package is abandoned and should not be used; install the official 'torch' package instead.
- High install friction due to a large archived tarball (pytorch-1.0.2.tar.gz).
- The package has been abandoned since 2019-04-24 with no maintenance activity for 2669 days.
License · maintenance · safety
(unclear) — License treatment is unclear with no SPDX identifier or raw license text provided, making legal compliance status uncertain.
last release 2019-04-24 (2669 days)
2 known vulnerabilities (OSV.dev, 2026-08-14) · 180,046 downloads/mo, #10,155 on PyPI
Alternatives
Verify before relying
# This package should not be used. The actual PyTorch library is distributed as 'torch':
# pip install torch
# import torch- Whether this package contains actual PyTorch code or is purely a redirect/stub.
- Whether the 2 known vulnerabilities (GHSA-63cw-57p8-fm3p, PYSEC-2026-1856) affect this package or were inherited from an older release.
- Whether the official 'torch' package supersedes this entirely.
What it is and what it does
This package is a stub or redirect that was historically confused with the official PyTorch deep learning framework. The actual PyTorch library is distributed under the package name 'torch', not 'pytorch'. This package has been abandoned since 2019-04-24 and has received no maintenance for 2669 days. It contains a large archived tarball and carries two known security vulnerabilities. There is no reason to install this package; anyone seeking PyTorch should install 'torch' from the official PyTorch project instead. The package serves no active purpose and represents a common installation mistake.
Use it for
- Do not use this package for any purpose; it is abandoned and misdirected.
- Historical reference only if studying PyPI naming mistakes from 2017–2019.
- If you need PyTorch, install 'torch' from the official project instead.
Worth the install?
AI-flagged interpretation of the facts on this page. Verify before relying on it.
No.
This package is abandoned, misdirected, and superseded by 'torch'. It has known vulnerabilities (GHSA-63cw-57p8-fm3p, PYSEC-2026-1856), unclear licensing, and high install friction. Install 'torch' instead.
Install
pytorch on PyPI
Before you install
High install friction due to a large archived tarball (pytorch-1.0.2.tar.gz). The package has been abandoned since 2019-04-24 with no maintenance activity for 2669 days. Do not install this.
This package is abandoned and should not be used; install the official 'torch' package instead.
License in practice
License treatment is unclear with no SPDX identifier or raw license text provided, making legal compliance status uncertain.
Quickstart
# This package should not be used. The actual PyTorch library is distributed as 'torch':
# pip install torch
# import torchVerify before relying
- Whether this package contains actual PyTorch code or is purely a redirect/stub.
- Whether the 2 known vulnerabilities (GHSA-63cw-57p8-fm3p, PYSEC-2026-1856) affect this package or were inherited from an older release.
- Whether the official 'torch' package supersedes this entirely.
Package facts
| License | Not declared unclear |
| Python support | Not specified |
| Install friction | High. Source build required |
| Runtime dependencies | None |
| Maintenance | Abandoned 2,669 days since the last release |
| First released | |
| Downloads | 180,046 / month, #10,155 on PyPI 30-day window, as of 2026-08-14 |
| Known vulnerabilities | 2 GHSA-63cw-57p8-fm3p, PYSEC-2026-1856 |
Evidence: pytorch-1.0.2.tar.gz
Tags
Let your AI agent find packages like this
Example. Real query, live index.
You found this page by searching. An agent finds it by wishing: SkillFed indexes 14,416 PyPI packages by what they can do, searchable in plain language.
wish › “pytorch machine learning”
- pytorchThis package is a redirect or placeholder; the actual PyTorch library…
- torchaudioProvides PyTorch-based audio processing, transforms, and dataloaders…
- arm-pytorch-utilitiesProvides utility functions for PyTorch development, including random…
Give your agent the search over MCP, or paste the wish link into any chat.
More Artificial Intelligence packages
LiteLLM provides a unified Python interface to call 100+ LLM providers (OpenAI, Anthropic, Gemini, Bedrock, Azure, and others) using OpenAI-compatible API format, available as both a Python SDK and a self-hosted AI Gateway proxy server.
Install it if you need to work with multiple LLM providers or want to centralize LLM routing in your organization.
Client library and CLI tool for downloading, uploading, and managing models, datasets, and repositories on the Hugging Face Hub platform.
Install it if you work with Hugging Face Hub models or datasets.
LangChain provides a framework for building agents and LLM-powered applications by composing language models, tools, and memory through a unified API that abstracts over multiple model providers.
hf-xet provides chunk-based deduplication and efficient file transfer for the Hugging Face Hub, enabling faster uploads and downloads of large files with local disk caching.
Tokenizers converts raw text into token sequences for NLP models, with support for training custom vocabularies and using pre-built tokenizers (BPE, WordPiece) optimized for speed via Rust.
Transformers provides a unified framework for loading, fine-tuning, and running state-of-the-art pretrained models across text, vision, audio, video, and multimodal tasks using PyTorch, JAX, or TensorFlow.
Install it if you need to run or train any transformer-based model for NLP, vision, audio, or multimodal tasks.
See also torch · huggingface · zuko · tensorflow · hoptorch · torch-npu · torch-model-archiver · torch-geometric · pytorch_optimizer · tinygrad