67d ago

PyPI hardens package security with new upload restrictions

PyPI hardens package security with new upload restrictions The Python Package Index (PyPI) now rejects uploads of new files to releases older than 14 days to prevent attackers from poisoning long-stable releases if a project’s publishing tokens or release workflows are compromise… #hackernews #news The Python Package Index (PyPI) now rejects uploads of new files to releases older than 14 days to p

1 reportother

Claim audit

No BS check run yet — press ⚖ to extract this story's claims and verify them against independent sources.

All coverage

PyPI hardens package security with new upload restrictions

stream:bsky-jetstreamother67d ago kagi ↗

PyPI hardens package security with new upload restrictions The Python Package Index (PyPI) now rejects uploads of new files to releases older than 14 days to prevent attackers from poisoning long-stable releases if a project’s publishing tokens or release workflows are compromise… #hackernews #news The Python Package Index (PyPI) now rejects uploads of new files to releases older than 14 days to p