PyPI now supports archiving projects

Summary: PyPI now lets project owners mark their projects as archived, signaling that no further updates are expected, and owners can unarchive at any time. Archival is distinct from yanking or deletion: archived projects are never deleted and can still be resolved by default, though the status currently appears only on PyPI's web interface and is not yet machine-readable for installers like pip and uv.
What you should know: An archived package is a clear signal that its maintainers intend to make no future security fixes, so every dependency you carry in that state is one you are effectively maintaining yourself. The signal exists for humans reading the PyPI page today, not for the installers that would flag it automatically.

Read the original at Trail of Bits Blog ↗