1
PyPI Was Subpoenaed
The PSF received three subpoenas from the US Department of Justice for PyPI user data in March and April of 2023.
PyPI Blog
The official blog of the Python Package Index
- Popular posts
- 8
- Total points
- 2,254
- HN comments
- 1,364
- Rank
- #544 company
Visit blog.pypi.org → RSS feedOn Hacker News Apr 2023 – Aug 2025
Security & Privacy 8Software Engineering 7Society, Policy & Culture 1
2
PyPI now supports digital attestations
Announcing support for PEP 740 on the Python Package Index
3
Removing PGP from PyPI
PyPI has removed support for uploading PGP signatures with new releases.
4
Introducing 'Trusted Publishers'
Announcing a new, more secure way to publish to PyPI
5
PyPI has completed its first security audit
We are proud to announce PyPI's first external security audit.
6
PyPI Preventing Domain Resurrection Attacks
PyPI now checks for expired domains to prevent domain resurrection attacks, a type of supply-chain attack where someone buys an expired domain and uses it to take over PyPI accounts through password resets.
7
PyPI Prohibits inbox.ru email domain registrations
We have prohibited new registrations of accounts using inbox.ru email domains.
8
PyPI Requires 2FA for New User Registrations
PyPI requires new users to enable 2FA before performing management actions.