alt Hacker NewsThat’s nice. I don’t wish anything bad for you.
It isn’t any harder to publish without before this feature than it is now. In fact it’s easier, because I implemented generic API tokens for PyPI years before this feature, and the feature itself isn’t even tied to GitHub or any particular OIDC IdP. We just picked GitHub as the first external IdP because it is unambiguously the most popular one in the Python ecosystem.
Nobody needed generic API tokens for PyPI either. Not now, not years ago.
The problem isn't a technical one. The problem is that when a company / government body hears that the "official way to do X is Y", they'll create an internal policy to do Y all the time, regardless of how evil or stupid Y is.
You just destroyed a public good by making a bunch of organizations require the use of GitHub and other MS trash for no technical reason. You are a lot worse than a real estate developer who paved over a community park to build a parking lot for some mega corp. If people saw you doing this in a movie, it would've been so cartoonishly evil, the audience would think the director jumped a shark, yet, real life appears to be worse than the portrayal of evil in art.