PyPA
@ThePyPA
Followers
2K
Following
3
Media
12
Statuses
201
The Python Packaging Authority https://t.co/GoXbdsAWbM maintains much of Python's distribution toolchain, and anyone can join.
Your computer
Joined March 2014
https://t.co/YGs3v1bw6A now enforces that users with 2FA enabled must use an API token or Trusted Publisher configuration in place of their passwords. Read the announcement and details at:
blog.pypi.org
PyPI now requires all uploads from accounts with 2FA enabled to use an API token or Trusted Publisher configuration.
1
24
51
Happy Friday! It has been a busy week on our blog, but we're wrapping it up with an update on some of the work that's been going on in the background lately to ensure the privacy and security of PyPI users: https://t.co/19ObwiSmmG
blog.pypi.org
PyPI has stopped using IP data when possible, and is continuing to reduce the amount of IP data stored overall.
2
13
47
An important update on our efforts to secure PyPI with multi-factor authentication:
blog.pypi.org
PyPI will require all users who maintain projects or organizations to enable one or more forms of two-factor authentication (2FA) by the end of 2023.
0
29
90
The PSF was subpoenaed for the first time in March/April 2023 for for PyPI user data. Read our transparency blog post here:
blog.pypi.org
The PSF received three subpoenas from the US Department of Justice for PyPI user data in March and April of 2023.
4
51
107
New user and new project registrations on PyPI are temporarily suspended. See details at
status.python.org
4
52
151
PEP 658 has finally landed on PyPI! Wheels uploaded as of about 15 minutes ago now have the appropriate information served from the simple APIs, and METADATA files available on https://t.co/hVzzMojVbA.
2
16
71
Thanks to @awscloud, @ThePSF is hiring for a Safety and Security Engineer focused on PyPI! Read about how the role will be funded, what will be worked on, and how to apply at
blog.pypi.org
PyPI is hiring, thanks to funding from Amazon Web Services!
0
31
70
We’re very glad you’re here. https://t.co/7nIGlHtoQP
blog.pypi.org
Announcing the launch of blog.pypi.org
5
36
127
The PyPA has voted to accept two new member projects: https://t.co/iX9r0T3oeI & the corresponding GitHub action, https://t.co/RVlB80Qkpx 🎉 pip-audit audits Python environments and dependency trees for known vulnerabilities, and the action lets you easily run these audits in CI.
github.com
A GitHub Action for pip-audit. Contribute to pypa/gh-action-pip-audit development by creating an account on GitHub.
1
18
54
Incident report on malicious takeover of ctx package on PyPI has been published. Read details, mitigation, analysis, and more at
7
114
197
It's #GivingTuesday Become a Supporting Member of the Python Software Foundation! Donate to the PSF to further the development and adoption of Python. Your donation helps support sprints, meet-ups, and community events. https://t.co/SCpAo46i7p
3
12
41
Get paid to work on PyPI! One week left to submit your proposal!
We are hiring two contract developers to build organization accounts for @PyPI. This is a unique opportunity to flex your skills and develop next-gen features for PyPI. More details at
1
16
22
In total PyPI served 324.1 petabytes in 2021, that's an average bandwidth of 82.2 Gbps for the entire year. We and the entire Python community owe @fastly immense gratitude for providing this CDN service, their support makes PyPI as you know it possible.
4
22
134
Second question! How much bandwidth does it take to serve 126,545,477,066 downloads in a year?
The answer is: One hundred twenty-six billion five hundred forty-five million seven hundred seventy thousand and sixty-six downloads accounted for in 2021. 126,545,477,066 Thanks @googlecloud BigQuery for making it possible for us to track this scale.
8
12
57
The answer is: One hundred twenty-six billion five hundred forty-five million seven hundred seventy thousand and sixty-six downloads accounted for in 2021. 126,545,477,066 Thanks @googlecloud BigQuery for making it possible for us to track this scale.
Without phoning a friend (or querying the world wide web)... How many downloads do you think PyPI served in 2021?
7
30
110
Without phoning a friend (or querying the world wide web)... How many downloads do you think PyPI served in 2021?
19
10
63
The PSF conducted three surveys to gather community requirements that would drive future development. The feedback summary is available on @ThePSF's blog:
pyfound.blogspot.com
The PSF conducted a series of three surveys to identify key user requirements that have not been addressed so far. We used this round of sur...
1
29
88