The Python Package Index (PyPI) has introduced a redesigned user interface to enhance security features and package details. The updates include a new security tab that displays provenance states and per-file attestations, helping users verify the origins of release files. This initiative, funded by the Open Source Security Foundation, aims to improve user understanding of package security in response to the growing risks in the Python ecosystem.
Key facts
- PyPI's user interface updates were announced in July 2026.
- Digital attestations were introduced in 2024 to verify file origins.
- The new security tab displays release provenance states and attestation details.
- Warnings are issued for discrepancies in file provenance.
- The initiative was funded by the Open Source Security Foundation.
A short AI summary in our own words. The reporting belongs to Hacker News — Front Page; we don't reproduce it.