logoalt Hacker News

pdonis • yesterday at 9:14 PM • 1 reply • view on HN

Is "a public key that I personally upload to my PyPI account, using the credentials you already have that allow me to use that account" on the list of targets that will ever be supported?

If not--i.e., if only recognized "forges" are ever going to be supported--why not?


Replies

akerl_ • yesterday at 9:19 PM

https://news.ycombinator.com/item?id=50499442 Seems relevant here.

➕ show 1 reply