I wrote up a #PyPI incident report for some install-time issues experienced a few of weeks ago by some users, and what was changed.
@miketheman.comReposted by @pypi.org
Python Package Index
@pypi.org
The Python Package Index (PyPI) is the repository of software for the Python programming language. Pronounced 🥧 🫛 👁️
@miketheman.comReposted by @pypi.org@pypi.orgThe Python Package Index now rejects new files published to releases older than 14 days. This mitigation prevents long-stable releases from being poisoned in case publishing tokens or workflows of PyPI projects are compromised.
blog.pypi.orgReleases now reject new files after 14 days - The Python Package Index BlogPyPI no longer allows publishing new files to releases older than 14 days.