EmbeddingGemma 2: an open, lightweight multimodal embedding model
deepmind.google·6d ago
AI Engineering
Lobsters·Jul 22·5 min read
PyPI releases now reject new files after 14 days
TL;DR
PyPI now prevents uploads of new files to releases older than 14 days to protect against potential security breaches. This measure aims to safeguard stable releases from being compromised.
✦ Why It Matters
Review your project's release management practices to ensure compliance with the new PyPI policy.
Key Takeaways
- Update your release management strategy to comply with the new 14-day rule.
- Monitor your packages for any potential security vulnerabilities.
- Encourage users to create new versions for compatibility with Python updates.
- Stay informed about upcoming changes in the Upload 2.0 API.
How It Works
The new policy automatically rejects any attempts to upload new files to releases that are older than 14 days. This is designed to prevent attackers from modifying stable releases, thereby protecting users from potential malware.