On: PyPI halted new users and projects while it fended off supply-chain attack

[lmm]

Maven Central is notoriously fiddly to get an account for - it require a manual registration step and you have to GPG-sign all your packages. Seems like that barrier to entry may have been useful.