pypi

pypi, 1 month ago to python

PyPI package maintainers can now publish via Trusted Publishing from three additional providers:

• GitLab
• Google Cloud
• ActiveState

They join GitHub Actions to support publishing without long-lived passwords or API tokens.

#pypi #python
https://blog.pypi.org/posts/2024-04-17-expanding-trusted-publisher-support/

pypi, 3 months ago to random

PyPI now has an improved way to report #malware, via #PyPI itself! Available on web and preview beta API. Learn more and sign up to help test:

https://blog.pypi.org/posts/2024-03-06-malware-reporting-evolved/

pypi, 3 months ago to python

Looking back at 2023 @miketheman uncovered some impressive metrics that we want to share! A big thanks to Fastly- And also @awsopen for making Mike’s job possible! #thankyou #PyPI #python

pypi, 6 months ago to random

TestPyPI (http://test.pypi.org) now requires 2FA for all users to perform management actions.

This comes ahead of January 1, 2024 when the same requirement will be applied to all users of PyPI (http://pypi.org).

Read more at https://blog.pypi.org/posts/2023-12-06-2fa-enforcement-on-testpypi/

pypi, 1 year ago to random

upload.pypi.org now enforces that users with 2FA enabled must use an API token or Trusted Publisher configuration in place of their passwords.

Read the announcement and details at: https://blog.pypi.org/posts/2023-06-01-2fa-enforcement-for-upload/