Quoting Seth Larson

1 · · July 23, 2026, 5:04 a.m.
Summary
The Python Package Index (PyPI) imposes a new restriction preventing the upload of new files to releases older than 14 days to protect against potential vulnerabilities. This decision aims to safeguard against poisoning old releases in case of compromised publishing tokens or workflows.