blog.pypi.org on Hacker News

18 stories on the front page, newest first. Scroll down to watch the site change over time.

Screenshot of blog.pypi.org: PyPI Blog: Incident File Hosting Errors

PyPI Blog: Incident File Hosting Errors (blog.pypi.org)

4 points by miketheman 1 month ago | 0 comments

Screenshot of blog.pypi.org: PyPI Blog: Releases now reject new files after 14 days

PyPI Blog: Releases now reject new files after 14 days (blog.pypi.org)

77 points by miketheman 3 months ago | 45 comments

Screenshot of blog.pypi.org: PyPI in 2025: A Year in Review

PyPI in 2025: A Year in Review (blog.pypi.org)

73 points by miketheman 9 months ago | 24 comments

Screenshot of blog.pypi.org: PyPI Blog: Token Exfiltration Campaign via GitHub Actions Workflows

PyPI Blog: Token Exfiltration Campaign via GitHub Actions Workflows (blog.pypi.org)

64 points by miketheman 1 year ago | 18 comments

Screenshot of blog.pypi.org: PyPI Preventing Domain Resurrection Attacks

PyPI Preventing Domain Resurrection Attacks (blog.pypi.org)

111 points by pabs3 1 year ago | 45 comments

Screenshot pending…

Preventing ZIP parser confusion attacks on Python package installers (blog.pypi.org)

37 points by miketheman 1 year ago | 8 comments

Screenshot pending…

PyPI Prohibits inbox.ru email domain registrations (blog.pypi.org)

117 points by miketheman 1 year ago | 89 comments

Screenshot of blog.pypi.org: PyPI Organizations (2023)

PyPI Organizations (2023)(blog.pypi.org)

37 points by calpaterson 1 year ago | 12 comments

Screenshot pending…

PyPI Now Supports Project Archival (blog.pypi.org)

13 points by woodruffw 1 year ago | 0 comments

Screenshot of blog.pypi.org: PyPI Blog: Project Quarantine

PyPI Blog: Project Quarantine (blog.pypi.org)

82 points by miketheman 1 year ago | 24 comments

Screenshot of blog.pypi.org: Analysis of supply-chain attack on Ultralytics

Analysis of supply-chain attack on Ultralytics (blog.pypi.org)

79 points by SethMLarson 1 year ago | 18 comments

Screenshot of blog.pypi.org: PyPI now supports digital attestations

PyPI now supports digital attestations (blog.pypi.org)

207 points by miketheman 1 year ago | 160 comments

Screenshot of blog.pypi.org: Removing PGP from PyPI

Removing PGP from PyPI (blog.pypi.org)

56 points by harporoeder 2 years ago | 41 comments

Screenshot of blog.pypi.org: PyPI has completed its first security audit

PyPI has completed its first security audit (blog.pypi.org)

94 points by miketheman 2 years ago | 14 comments

Screenshot of blog.pypi.org: PyPI Requires 2FA for New User Registrations

PyPI Requires 2FA for New User Registrations (blog.pypi.org)

104 points by miketheman 3 years ago | 47 comments

Screenshot of blog.pypi.org: PyPI Was Subpoenaed

PyPI Was Subpoenaed (blog.pypi.org)

1073 points by quercusa 3 years ago | 535 comments

PyPI blog post disclosing that the PSF received three DOJ subpoenas in 2023 for user data on five PyPI accounts, detailing what was requested and provided.

pypi python-software-foundation subpoena user-privacy

Removing PGP from PyPI (blog.pypi.org)

170 points by dlor 3 years ago | 141 comments

Screenshot of blog.pypi.org: Introducing 'Trusted Publishers'

Introducing 'Trusted Publishers'(blog.pypi.org)

165 points by BerislavLopac 3 years ago | 64 comments