Python 包索引 (PyPI) 已实施一项新政策，以防止软件发布被投毒。新文件不能再上传到发布日期超过 14 天的发布版本。此举旨在防止发布令牌或工作流遭到潜在的泄露，尽管目前尚未报告此类滥用行为。 AI
影响 此政策变更通过对现有发布版本的更新增加基于时间的限制，从而影响了包括 AI 相关工具和库在内的软件分发。
排序理由 软件分发平台的政策变更，而非核心 AI 发布或研究。
AI 生成摘要 · Google Gemini · 来自 1 个来源。 我们如何撰写摘要 →
PyPI 限制上传以防止发布投毒
本文如何被排名
- Signal score
- 0 / 100
- Composite score across the factors below. Higher = stronger signal that this story matters right now.
- Newsworthiness bucket
- Tool
- 软件分发平台的政策变更，而非核心 AI 发布或研究。
- Source corroboration
- Single-source cluster
- Only one publisher covered this so far. Single-source stories can still rank when the publisher is high-authority, but they lack cross-source corroboration.
- Topics
- policy, product
- Editorial topic classification. Feeds into how the story surfaces on /topic/<slug> hub pages and into the per-entity coverage mix.
- AI-industry relevance
- Standard
- On-topic for AI-industry coverage; kept in the public index.
- Story freshness
- 73 days old
- Aged out of breaking-news scoring windows; ranking reflects the durable signal from the full source set.
完整方法见我们的编辑标准。
报道来源 [1]
-
引用 Seth Larson 的话
<blockquote cite="https://blog.pypi.org/posts/2026-07-22-releases-now-reject-new-files-after-14-days/"><p>The Python Package Index (PyPI) now rejects new files being uploaded to releases that are older than 14 days. This restriction was <a href="https://github.com/pypi/warehouse/…