---
id: 20260724-T0-11
title: "PyPI新规：发布超过14天后的新文件上传将被拒"
title_en: "PyPI Blocks Uploads to Releases Older Than 14 Days to Prevent Poisoning"
url: https://ai.daily.yangsir.net/daily/20260724-T0-11
issue_date: 2026-07-24
publish_date: 2026-07-23T04:50:36.000Z
category: tools
source_name: "Simon Willison"
source_url: https://simonwillison.net/2026/Jul/23/seth-larson/#atom-everything
---

# PyPI新规：发布超过14天后的新文件上传将被拒

Python包索引（PyPI）已实施新安全策略：不允许向超过14天的发布版本上传新文件。此举旨在防止因发布令牌或工作流被泄露而导致的旧版本投毒攻击，确保长期稳定版本不被篡改。

## English Version

**PyPI Blocks Uploads to Releases Older Than 14 Days to Prevent Poisoning**

PyPI now rejects file uploads to releases older than 14 days, preventing poisoned updates to long-stable releases even if publishing tokens or workflows are compromised.

---

**来源**：[Simon Willison](https://simonwillison.net/2026/Jul/23/seth-larson/#atom-everything)

**详情页**：https://ai.daily.yangsir.net/daily/20260724-T0-11

---

*智语观潮 · Daily — https://ai.daily.yangsir.net/llms.txt*