Python Package Index

@pypi

The Python Package Index (PyPI) is the repository of software for the Python programming language. Pronounced 🥧 🫛 👁️

The Cloud

blog.pypi.org

Joined September 2017

Python Package Index
@pypi
Jul 22
The #Python Package Index now rejects new files published to releases older than 14 days. This mitigation prevents long-stable releases from being poisoned in case publishing tokens or workflows of #PyPI projects are compromised. blog.pypi.org/posts/2026-07-… #security #supplychain
Releases now reject new files after 14 days - The Python Package Index Blog
From blog.pypi.org
Python Package Index
@pypi
Apr 16
🔎🔐 #PyPI has completed its second external #security audit! Thanks to Sovereign Tech Agency for funding, @trailofbits for the audit, and @AlphaOmegaOSS for supporting rapid remediation. Find the full report on the Trail of Bits publication page. #Python
PyPI has completed its second audit - The Python Package Index Blog
From blog.pypi.org
Python Package Index
@pypi
Apr 2
PSF Security developers have published incident reports on the LiteLLM & Telnyx #supplychain attacks. Read what happened, who's affected, and what developers & maintainers can do to prepare and protect themselves from future incidents. #security #python
Incident Report: LiteLLM/Telnyx supply-chain attacks, with guidance - The Python Package Index Blog
From blog.pypi.org
Python Package Index
@pypi
Jan 28
Over the past year (and a half!), our inaugural PyPI Support Specialist, Maria Ashna, helped tackle backlogs, improve support processes, and keep #PyPI running smoothly for the #Python community. Read the full reflection on what that work looked like 👇
Dispatch from PyPI Land: A Year (and a Half!) as the Inaugural PyPI Support Specialist - The Python...
From blog.pypi.org
Python Package Index
@pypi
Jan 6
2025 was another eventful year for PyPI! Critical security enhancements, powerful new org features, a better overall user experience, and transparent security incident response 🎉👏 Thank you, PyPI team & community! Learn more on our blog: blog.pypi.org/posts/2025-12-…