PyPI 2025 Year in Review: Security Enhancements, Organization Features, and Growth Statistics
By
miketheman
The bagel they save for the regulars. Don't skim, savour.
Summary
The article provides a year-end review of PyPI (Python Package Index) in 2025, highlighting major developments including enhanced security features, new organizational capabilities, improved user experience, and significant growth metrics. Key achievements include the rollout of organization accounts with advanced permissions, strengthened security measures like mandatory 2FA for critical projects, improved package scanning and vulnerability detection, and performance optimizations. The review also covers usage statistics showing continued growth in package uploads, downloads, and user adoption.
Key quotes
· 4 pulledAs 2025 comes to a close, it's time to look back at another busy year for the Python Package Index.
This year, we've focused on delivering critical security enhancements, rolling out powerful new features for organizations, improving the overall user experience for the millions of developers who rely on PyPI.
The rollout of organization accounts has been one of our most significant achievements this year, allowing teams to manage packages more efficiently with granular permissions and collaborative workflows.
Security remains our top priority, and in 2025 we implemented mandatory two-factor authentication for all projects with over 1 million monthly downloads, significantly reducing the risk of account compromise.
You might also wanna read
Zig Devlog: Build System Rework Separates Maker and Configurer Processes
This devlog entry from the Zig programming language project announces a major rework of the build system, separating the maker process from
ziglang.org·1d ago
magiblot/tvision: A modern cross-platform port of Turbo Vision 2.0 with Unicode support
A modern, cross-platform port of Turbo Vision 2.0, the classical framework for text-based user interfaces (TUI). Originally started as a per
github.com·1mo agoWhy a Software Maintainer is Rejecting External Pull Requests
The article is a personal reflection from a software maintainer explaining why they are rejecting pull requests (PRs) from external contribu
GitHub Repository: Chip8 Emulator Project for Virtual Machine Emulation
The article appears to be a GitHub repository page for a Chip8 emulator project called 'navid-m/chip8emu'. The content shows GitHub's interf
github.com·1mo ago
10-year-old unit test with future cookie expiry date breaks Servo browser CI system
A developer shares a story about a unit test written 10 years ago for the Servo browser engine that included a cookie expiry date of April 1
mastodon.social·1mo ago
Servo Browser Engine Releases First crates.io Version as Embeddable Library
Servo, the web browser engine written in Rust, has released its first crates.io version (v0.1.0), making it available as a library for devel
servo.org·1mo ago