PyPI's redesigned project pages with clearer security signals are now live
Comments
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Summary
PyPI has launched redesigned project pages that make package security signals more visible. The update adds a dedicated security tab showing per-file attestations and provenance states, which indicate whether release files can be cryptographically traced to their source.