The source distributions have icons while the wheels have not. Strange and confusing.
mhils 16 minutes ago [-]
Very cool to see PyPI put more emphasis towards exposing provenance info. It would be even cooler if trusted publishing would finally support reusable workflows (https://github.com/pypi/warehouse/issues/11096).
darkamaul 20 minutes ago [-]
Not directly the subject but they switched from Material for MkDocs to Zensical.
It’s quite sad to see that one of the main (or the biggest?) documentation system for the Python completely alienated its user base and led to this fork.
cowlevel 52 minutes ago [-]
This is about detecting formerly benign projects that have had their pypi entries hacked, but not their private keys. It does not detect malicious projects.
agentsecindex 16 minutes ago [-]
[flagged]
zxc0827 58 minutes ago [-]
[flagged]
mistursinistur 27 minutes ago [-]
Nobody is looking at these pages
abcmall 56 minutes ago [-]
[flagged]
tdeck 47 minutes ago [-]
Two days seems like a decent response time to make an improvement, no?
jlak-aski 41 minutes ago [-]
No, the backlash was in Tim Peter's obituary, not in a PyPI thread. No improvement can be made apart from firing all people involved in libel and harassment of dissenters.
This is just the usual diversion that magically floated right to the top.
abbadadda 38 minutes ago [-]
What’s the story? I seem to have missed this.
neuronexmachina 15 minutes ago [-]
Yeah, I have no idea what they're talking about either.
25 minutes ago [-]
Rendered at 17:11:56 GMT+0000 (Coordinated Universal Time) with Vercel.
dlt (no provenance): https://pypi.org/project/dlt/#files
datasette (yes provenance): https://pypi.org/project/datasette/#files
It’s quite sad to see that one of the main (or the biggest?) documentation system for the Python completely alienated its user base and led to this fork.
This is just the usual diversion that magically floated right to the top.