PyPA retweeted
upload.pypi.org now enforces that users with 2FA enabled must use an API token or Trusted Publisher configuration in place of their passwords.
Read the announcement and details at: blog.pypi.org/posts/2023-06-…
PyPA retweeted
Happy Friday!
It has been a busy week on our blog, but we're wrapping it up with an update on some of the work that's been going on in the background lately to ensure the privacy and security of PyPI users:
blog.pypi.org/posts/2023-05-…
PyPA retweeted
An important update on our efforts to secure PyPI with multi-factor authentication: blog.pypi.org/posts/2023-05-…
PyPA retweeted
The PSF was subpoenaed for the first time in March/April 2023 for for PyPI user data.
Read our transparency blog post here: blog.pypi.org/posts/2023-05-…
PyPA retweeted
New user and new project registrations on PyPI are temporarily suspended.
See details at status.python.org/incidents/…
PyPA retweeted
PEP 658 has finally landed on PyPI!
Wheels uploaded as of about 15 minutes ago now have the appropriate information served from the simple APIs, and METADATA files available on files.pythonhosted.org.
PyPA retweeted
Thanks to @awscloud, @ThePSF is hiring for a Safety and Security Engineer focused on PyPI!
Read about how the role will be funded, what will be worked on, and how to apply at blog.pypi.org/posts/2023-05-…

