PyPI's redesigned project pages with clearer security signals are now live

PyPI has launched redesigned project pages featuring a new security tab that clearly displays digital attestations and provenance information for Python packages. The updates, developed in partnership with user research and the OpenSSF, help users verify where release files originated through two main provenance states: "Full Provenance" (when 100% of files have attestations) and "No Provenance" (when files lack attestations). These changes aim to make PyPI's security features more accessible and help users better assess package security in an increasingly targeted ecosystem.