I have a private package, and I want to make sure the built distributions can't get uploaded to PyPI (so it can't easily be leaked), I realize this is a quite specific request, but I would be very grateful if it could be added.
This would need to move to a different repository. Twine can't make arbitrary changes to the metadata specification for Python packaging
https://github.com/pypa/packaging-problems is the right repo _I think_
You can set a classifier on your distribution such as Private :: Do Not Upload (or anything with the Private top-level classifier) and PyPI will refuse to accept it.
This would prevent it from accidentally being uploaded... anyone intentionally trying to leak it would still be able to (by removing the classifier), but there's not much that can be done to prevent that.
That is exactly what I need. Thank you @di 馃槃
Most helpful comment
You can set a classifier on your distribution such as
Private :: Do Not Upload(or anything with thePrivatetop-level classifier) and PyPI will refuse to accept it.This would prevent it from accidentally being uploaded... anyone intentionally trying to leak it would still be able to (by removing the classifier), but there's not much that can be done to prevent that.