PyPI
Fewer than 5 people recommend it so far, so there's no written verdict. Here is what commenters said.
Why people recommend it
“Well first off I love PyPI”
“it protects several of the most popular packages”
Show 3 more
“This closes a gap in the legacy upload API”
“PyPI also tries a fair bit to monitor for incoming malware”
“PyPI does exactly that, and it's been very effective.”
Caveats and dissent
“insanely easy to attack "programming language package ecosystems", like NPM, PyPI”
“I never trust npm, pypi, etc. any longer.”
Show 2 more
“PyPi is also affected”
“literally the latest attack included publishing malicious packages on PyPi”
Often compared with
From the makers not counted in the ranking
“Both Trusted Publishing and attestations were multi-year projects”
“when we designed Trusted Publishing for PyPI, we designed it to be generic across OIDC IdPs”
Threads where it came up
- NPM to implement staged publishing after turbulent shift off classic tokens 5 mentions
- My minute-by-minute response to the LiteLLM malware attack 2 mentions
- PyPI in 2025: A Year in Review 2 mentions
- Package managers keep using Git as a database, it never works out 2 mentions
- Malware uses LLMs to rank victims by how much they're worth 1 mention
- Evolving Threat: http2shell is an RCE in Node, Python, and more 1 mention
Data: pypi.json. Quotes are verbatim; the verdict and theme labels are written by a model from these comments, and every clause links to its sources.
All comments 27
“insanely easy to attack "programming language package ecosystems", like NPM, PyPI”
“Well first off I love PyPI”
“it protects several of the most popular packages”
“I never trust npm, pypi, etc. any longer.”
“This closes a gap in the legacy upload API”
“PyPi is also affected”
“PyPI also tries a fair bit to monitor for incoming malware”
“i've used pypi, which enables: `uvx <package name>` or `uv tool install <package name>` for a more permanent setup”
“literally the latest attack included publishing malicious packages on PyPi”
You may be interested in this discussion: https://discuss.python.org/t/use-of-pypi-as-a-generic-storage-platform-for-binaries/106044
“PyPI has paid organization accounts now which are beginning to form a meaningful revenue stream”
“PyPI does exactly that, and it's been very effective.”
“PyPI enforces immutable releases.”
“The other thing i love about npm and pypi”
“PyPI is the Python Package Index, which is up and maintained”
“pypi also added this last year”
— Why are you launching nukes? No one asked you to obliterate humanity. — You’re absolutely right. I should not have done that. Would you like me to help undo the launch? — Yes! Quickly! Do it! — <completely made up crap which does not work> https://www.newyorker.com/cartoon/a16995
“just about every complex aspect of PyPI's attestation scheme has a reason behind it”
“For better or worse, pypi is the executable distribution mechanism of the future”
“That is one of the reasons I stopped using PyPI and instead distribute my wheels from my own web site.”
“only the big boys are allowed to become”
“PyPI did a good job of documenting why”
“The situation that PyPi is in is clearly worse”
“Why do people come up with such unbelievably complex solutions”
“there are no rate limits on pypi”
“how can PyPI be sure it's talking to github?”
“It does largely avoid the issue if you configure to allow only specific environments”