pypi / pypiserver
pypiserver
What changed in pypiserver 2, from its official release notes, upgrade guides and advisories. Sources checked 2026-10-19.
1 breaking1 security5 fixes and other
See which of these apply to your code, ranked, in your agent:
npx @unstale/cli initpypiserver 27 changes
Breaking changes 1
Support for Python 3.8 and 3.9 was removed, affecting which Python versions developers can use.
Security 1
Hardens the XML parser against entity-expansion DoS attacks.
Fixes and other changes 5
Preserves proxy prefixes when generating normalization redirects.
Fixes download URLs so they retain the base URL prefix.
The cgi import error on Python 3.13 and later was fixed.
A missing whitespace in help output was fixed, changing the formatting developers see when requesting help.
Compatibility with twine 1.7.0 was fixed, allowing developers using that version to work with pypiserver.