LWN reports that PyPI now rejects new files uploaded to releases older than 14 days, a supply-chain hardening step intended to limit old-release poisoning after compromised publishing tokens or workflows.
PyPI now rejects new files after 14 days
LWN reports that PyPI now rejects new files uploaded to releases older than 14 days, a supply-chain hardening step intended to limit old-release poisoning after compromised publishing tokens or workflows.
Source: Lwn