#pypi is an active hashtag on Bluesky. In the last 30 days, 25 people shared 58 posts with it — around 2 a day. Activity is up 60% versus the previous week, peaking on Jul 31 with 6 posts.

Posts with #pypi

Python Software Foundation

@python.org

10 months ago

PyPI serves billions of requests daily- but sustaining it isn’t free. The PSF joined the OpenSSF & others in calling for organizations to invest in sustainable open infrastructure. Learn what this means for #PyPI, the PSF, & how our community can pitch in:

pyfound.blogspot.com

Open Infrastructure is Not Free: PyPI, the Python Software Foundation, and Sustainability

In September, the Python Software Foundation (PSF) co-signed the Open Infrastructure is Not Free: A Joint Statement on Sustainable Stewardship Letter published by the Open Source Security Foundation (OpenSSF) as a steward of the Python Package Index (PyPI). As a follow up, I would like to share a bit more about the concerns expressed in this letter as they relate to our community and the PSF.

0 13 51

Mike Fiedler

@miketheman.com

2 days ago

Wednesday night I'll be speaking at the NYC Open Source Security User Group meetup. If your release pipeline still has stored API tokens in it, come find out how to delete them for good. Free registration: luma.com/5mwalp6p?tk=... #Python #OpenSourceSecurity #SupplyChainSecurity #NYCTech #PyPI

luma.com

Trusted Publishing — Eliminating Credentials from Your Release Workflow · Luma

6:00-6:30 Network - Pizza provided 6:30-7:30 Talk and Q&A 7:30-8:00 Network In February 2024, about 10% of PyPI uploads used Trusted Publishers. By October…

1 1 5

Python Package Index

@pypi.org

about 1 month ago

The Python Package Index now rejects new files published to releases older than 14 days. This mitigation prevents long-stable releases from being poisoned in case publishing tokens or workflows of PyPI projects are compromised. blog.pypi.org/posts/2026-0... #python #security #supplychain #pypi

blog.pypi.org

Releases now reject new files after 14 days - The Python Package Index Blog

PyPI no longer allows publishing new files to releases older than 14 days.

0 17 46

Python Package Index

@pypi.org

6 months ago

Huge thanks to @fastly.com for 10+ years of keeping #PyPI up and running! PyPI serves 800K+ users at ~100K requests/sec. With a small team behind the service, that kind of scale is only possible because of infrastructure partners who invest in the sustainability of the #Python ecosystem.

Fastly @fastly.com

For 10+ years, Fastly has supported the @python.org in securing & scaling the #Python Package Index (PyPI). Proud to help keep one of the world’s most critical open source ecosystems fast, fresh, & secure. www.fastly.com/customers/psf #OpenSource

1 13 38

Python Software Foundation

@python.org

7 days ago

#PyPI runs on ~zero AWS cost thanks to @fastly.com caching 99% of traffic + @awscloud.bsky.social credits covering the rest. Huge thanks to both! But 2026 broke an 8-year streak: AWS spend is up 69% YoY as agents & CI runs surge. Jacob Coffee on what's changing: pyfound.blogspot.com/2026….

pyfound.blogspot.com

How AWS Powers PyPI and the PSF

0 7 11

Seth Larson

@sethmlarson.dev

4 months ago

pip 26.1 is an incredible release, thank you to the pip maintainers!! 💜 – Relative dependency cooldown support! – Installing from pylock.toml – Multiple security fixes Read the full blog post by Richard Si: ichard26.github.io/blog/2…. #python #pypi #pip #security #oss #opensource

ichard26.github.io

What's new in pip 26.1 - lockfiles and dependency cooldowns!

pip 26.1 adds support for dependency cooldowns, experimental support for reading/installing from standard lockfiles (pylock.toml), fixes several long-standing limitations of the 2020 resolver, and dro...

1 11 35

Hugo van Kemenade

@hugovk.dev

11 months ago

Some stats from core dev @hauntsaninja.bsky.social showing Python 3.14 had more usable packages on day 1 than other recent releases. New releases of #cibuildwheel adding 3.14 as optional and then default also helped. discuss.python.org/t/stat…. #Python #Python314 #wheels #stats #PyPI

Python adoption chart showing number of packages definitely supporting 3.11 to 3.14 against time since final release, starting at -400, going to +1000 days, where available. All curves follow a similar trend, but newer ones have more available earlier. The trend is fairly flat at -400, but around -300 start picking up, and at day zero all increase a lot.

Similar to the previous chart, but Python adoption amongst packages with version specific wheels. Here, the new versions have much greater adoption than earlier ones.

0 4 28

Python Package Index

@pypi.org

4 months ago

🔎🔐 PyPI has completed its second external #security audit! Thanks to @sovereign.tech for funding, Trail of Bits for the audit, and Alpha-Omega for supporting rapid remediation. Find the full report on the Trail of Bits publication page. #Python #PyPI

blog.pypi.org

PyPI has completed its second audit - The Python Package Index Blog

We are proud to announce PyPI's second external security audit.

0 12 24

Python Software Foundation

@python.org

3 months ago

The PSF's Strategic Plan full draft is available and we want your feedback. After sharing high-level goals in May, we're opening a 3-week community feedback window. Read the full draft and tell us: Are these the right goals? Is anything missing? #Python #PyPI pyfound.blogspot.com/2026….

0 16 24

Python4DataScience

@python4data.science

almost 2 years ago

We have extended our tutorial for publishing Python packages to include the digital attestations signed by PyPI: python-basics-tutorial.readthedocs.io/en/latest/pa... This significantly increases supply-chain security. #Python #PyPI #SupplyChainSecurity

python-basics-tutorial.readthedocs.io

Upload package

Finally, you can deploy the package on the Python Package Index( PyPI) or another index, for example GitLab Package Registry or devpi. For the Python Package Index, you must register with Test PyPI...

0 3 22

Python Software Foundation

@python.org

about 2 months ago

🎉 Cheers and huge thanks to Meta for 10 years running as a PSF sponsor! Their support has helped fund #PyPI security work, the Developer in Residence program, and community events like #PyConUS. If #Python powers your organization, consider giving back by sponsoring the PSF 💛💙

engineering.fb.com

10 Years of Meta’s Commitment to Python

This year marks Meta’s 10th consecutive year as a sponsor of the Python Software Foundation (PSF), the charitable organization dedicated to advancing, supporting, and protecting the open-sour…

3 3 20

Hugo van Kemenade

@hugovk.dev

over 1 year ago

🐍📦📜 All the pieces (I use) are now in place for PEP 639 ("Improving License Clarity with Better Package Metadata"). Thanks to contributors and maintainers of at least 6 projects and of course Karolina Surma for the PEP! discuss.python.org/t/pep-…. #Python #PEP639 #PyPI #SPDX #licensing