you know artipie? it is only in java, but does a similar part.
will your stuff be really opensource?
will your stuff be really opensource?
There are 7 or 8 repositories now in this org. Feel free to take, use, or help imrove the code. MIT Open Source.
Would it be possible, that the storage of pypi/whatever is some s3 bucket, where you have it encrypted (with authentication), and when you deliver it to a client, you get it, decrypt it, test for authentication and deliver it to the client? the encryption is something that artipie is lacking sadly.