PyPI beta announcement
[This page is a draft and not to be used/publicized until we close out the "publicize beta" milestone. That'll probably be by March 20, 2018.]
The new Python Package Index is now in beta at https://pypi.org/. On the Warehouse roadmap, it looks like the full switch will happen sometime in April 2018, so here's a heads-up about why we're switching, what's changed, and what to expect.
The legacy PyPI site at https://pypi.python.org started in the early 2000s. In recent years, users faced outages, malicious packages, and spam attacks, and the legacy codebase made it hard to maintain and even harder to develop new features.
The new PyPI (Warehouse) has a far more modern look, and is up-to-date under the hood as well; a proper web framework (Pyramid), 100% backend test coverage, and a Docker-based development environment make it easier for current and new developers to maintain it and add features.
Thanks to Mozilla's Open Source Support funding, developers have added many new features, overhauled infrastructure, and made steady progress towards redirecting traffic to the new site and shutting down the old one. The full switch will include redirecting browser and pip install traffic from the old site; then, sometime in late April or early May, the legacy site will be entirely shut down.
Your sites, services, and tools will probably be able to seamlessly switch to the new site, and thanks to redirects, may not have to change anything immediately. We have a migration guide for package users and maintainers and a migration guide for API users.
New PyPI Features
- mobile-responsive UI
chronological release history for each project (example)
- easy-to-read project activity journal for project maintainers
- better search and filtering
support for multiple project URLs (e.g., for a homepage and a repo)
- user-visible Gravatars and email addresses for maintainers
- no need to "register" a project before initial upload
- far better backend infrastructure, reducing the frequency of outages
As of the middle of last year, package releases must go through the new PyPI, and as of late February, new user account registration is only available on the new site.
Things that are going away, or already have (sometimes for policy or spam-fighting reasons), include:
pythonhosted.com documentation hosting (future plans)
- key management: PyPI no longer has a UI for users to manage their GPG or SSH public keys
package maintainers being able to upload a new release via the web UI (instead, the recommended command-line tool is Twine)
package maintainers being able to log in and update release descriptions via the web UI (to update release metadata, they need to upload a new release; see distutils-sig discussion)
And in the works:
PEP 541 will enable more timely package takeovers, as people get package names transferred to them after conflict resolution
Now that PEP 566 has been approved, developers are working to get Markdown supported for README files on PyPI
For future updates, please sign up for the low-traffic PyPI announcements email list.
If you find any potential security vulnerabilities, please follow our published security policy. Please don't report security issues in Warehouse via GitHub, IRC, or mailing lists. Instead, please directly email one or more of our maintainers.
Security issues: email Donald Stufft or Ernest W. Durbin III
GitHub for all other bug reports & feature requests:https://github.com/pypa/warehouse/issues/new
IRC: #pypa-dev on Freenode (someone's usually there 10am-5pm Central Time on weekdays)
Email: pypa-dev mailing list
(By participating, you agree to abide by the PyPA Code of Conduct.)
Thank you for using PyPI!