PyPI restricts uploads to prevent release poisoning

The Python Package Index (PyPI) has implemented a new policy to prevent the poisoning of software releases. New files can no longer be uploaded to releases older than 14 days. This measure aims to protect against potential compromises of publishing tokens or workflows, although no such abuse has been reported yet. AI

IMPACT This policy change impacts the distribution of software, including AI-related tools and libraries, by adding a time-based restriction on updates to existing releases.

RANK_REASON Policy change for a software distribution platform, not a core AI release or research.

Read on Simon Willison →

• Claude
• Hugging Face
• OpenAI
• Python Package Index
• Seth Larson

• policy
• product

AI-generated summary · Google Gemini · from 1 sources. How we write summaries →