The letter

One letter a week, starting soon.

The week's signal, what shipped, what is worth running tonight, and the editor's note. No tracking, no ads, nothing else.

We keep your address, your language and the date you joined, nothing else. Every letter has a one-click unsubscribe link that deletes the record.
← Accept All   Archive
PyPI BlogLanguages

Trusted Publishing is popular, now for GitLab Self-Managed and Organizations

2025.11.10

Trusted Publishing has proven popular since its launch in 2023 . Recap: Trusted Publishing enables software build platforms to publish packages to PyPI on your behalf, eliminating the need to manage…

oidcorganizationspublishingsecurity
Read at PyPI Blog ↗

More from PyPI Blog on Accept All

LanguagesPhishing attacks with new domains likely to continue PyPI Blog

LanguagesToken Exfiltration Campaign via GitHub Actions Workflows PyPI Blog

LanguagesPreventing Domain Resurrection Attacks PyPI Blog

LanguagesPyPI now serves project status markers in API responses PyPI Blog

LanguagesPreventing ZIP parser confusion attacks on Python package installers PyPI Blog

LanguagesPyPI Phishing Attack: Incident Report PyPI Blog

More from PyPI Blog on Accept All.