Removing PGP from PyPI(blog.pypi.org)

56 points by harporoeder 2 years ago | 41 comments

PyPI now supports digital attestations(blog.pypi.org)

207 points by miketheman 1 year ago | 160 comments

Introducing 'Trusted Publishers'(blog.pypi.org)

165 points by BerislavLopac 3 years ago | 64 comments

PyPI Blog: Releases now reject new files after 14 days(blog.pypi.org)

77 points by miketheman 3 months ago | 45 comments

PyPI Was Subpoenaed(blog.pypi.org)

1073 points by quercusa 3 years ago | 535 comments

PyPI blog post disclosing that the PSF received three DOJ subpoenas in 2023 for user data on five PyPI accounts, detailing what was requested and provided.

PyPI in 2025: A Year in Review(blog.pypi.org)

73 points by miketheman 9 months ago | 24 comments