@fallenhitokiri@social.screamingatmyscreen.com
Post #1834542
2026-03-28 06:00 UTC
@brettcannon per the thread there doesn’t seem to be a way to establish any new providers outside of the blessed ones when 7 years is considered “too young”. The technical / operational concerns are valid IMHO.
The maturity argument also falls very short when you objectively look at the trajectory of a blessed provider with outages piling up.
The example with SourceForge in the discussion is a perfect example for that and also why blessed providers are not the way to go.
Replies (1)
-
@brettcannon@mastodon.social 2026-03-28 19:36
@fallenhitokiri trusted != uptime; it just means PyPI expects that security is at a certain level around identity