Skip to content

Instantly share code, notes, and snippets.

@lmmx
Created March 26, 2026 11:59
Show Gist options
  • Select an option

  • Save lmmx/aa69b2226184ce066c750b9a57f85698 to your computer and use it in GitHub Desktop.

Select an option

Save lmmx/aa69b2226184ce066c750b9a57f85698 to your computer and use it in GitHub Desktop.
Sublist from the top 500 packages on PyPI which use Trusted Publishing with the pypa/gh-action-pypi-publish action
package github_repo uses_trusted_publishing has_pypi_publish_action has_id_token_write tp_signals publishing_workflow pinning_status sha_pinned_actions total_actions workflow_count source error
certifi certifi/python-certifi True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password release.yml ALL_SHA 5 5 1 cache
typing-extensions python/typing_extensions True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password publish.yml MIXED 11 37 3 cache
idna kjd/idna True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password deploy.yml ALL_SHA 9 9 1 cache
charset-normalizer jawah/charset_normalizer True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password cd.yml MIXED 38 43 4 cache
pip pypa/pip True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password release.yml MIXED 4 21 4 cache
click pallets/click True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password publish.yaml ALL_SHA 7 7 1 cache
pandas pandas-dev/pandas True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password wheels.yml ALL_SHA 40 40 11 cache
pytest pytest-dev/pytest True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password deploy.yml ALL_SHA 27 27 6 cache
anyio agronholm/anyio True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password publish.yml NONE 0 31 3 cache
markupsafe pallets/markupsafe True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password publish.yaml ALL_SHA 25 25 4 cache
iniconfig pytest-dev/iniconfig True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password test.yml NONE 0 11 1 cache
platformdirs tox-dev/platformdirs True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password release.yaml ALL_SHA 15 15 2 cache
wheel pypa/wheel True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password publish.yml NONE 0 11 2 cache
filelock tox-dev/py-filelock True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password release.yaml NONE 0 15 2 cache
jinja2 pallets/jinja True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password publish.yaml ALL_SHA 20 20 4 cache
pathspec cpburnz/python-pathspec True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password publish-to-testpypi.yml ALL_SHA 16 16 4 cache
typing-inspection pydantic/typing-inspection True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password ci.yml NONE 0 30 3 cache
aiohttp aio-libs/aiohttp True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password ci-cd.yml NONE 0 41 1 cache
python-dotenv theskumar/python-dotenv True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password release.yml NONE 0 6 2 cache
multidict aio-libs/multidict True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password ci-cd.yml NONE 0 24 1 cache
jsonschema python-jsonschema/jsonschema True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password ci.yml MIXED 5 9 1 cache
tzdata python/tzdata True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password publish.yml NONE 0 4 1 cache
yarl aio-libs/yarl True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password ci-cd.yml NONE 0 20 1 cache
virtualenv pypa/virtualenv True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password release.yaml NONE 0 20 4 cache
frozenlist aio-libs/frozenlist True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password ci-cd.yml NONE 0 18 1 cache
propcache aio-libs/propcache True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password ci-cd.yml NONE 0 26 1 cache
aiosignal aio-libs/aiosignal True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password ci-cd.yml MIXED 3 16 3 cache
pillow python-pillow/Pillow True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password wheels.yml MIXED 1 51 12 cache
trove-classifiers pypa/trove-classifiers True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password release.yml NONE 0 6 1 cache
aiohappyeyeballs aio-libs/aiohappyeyeballs True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password ci-cd.yml NONE 0 20 2 cache
oauthlib oauthlib/oauthlib True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password python-build.yml NONE 0 14 3 cache
tenacity jd/tenacity True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password release.yml NONE 0 5 2 cache
yandexcloud yandex-cloud/python-sdk True True True id-token:write, pypa/gh-action-pypi-publish release.yml NONE 0 16 5 cache
soupsieve facelessuser/soupsieve True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password deploy.yml NONE 0 17 3 cache
shellingham sarugaku/shellingham True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password publish.yml NONE 0 8 2 cache
langchain langchain-ai/langchain True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password _release.yml MIXED 3 19 1 cache
hatchling pypa/hatch True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password build-hatch.yml NONE 0 73 8 cache
exceptiongroup agronholm/exceptiongroup True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password publish.yml NONE 0 15 2 cache
websockets python-websockets/websockets True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password release.yml NONE 0 17 2 cache
pyopenssl pyca/pyopenssl True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password release.yml MIXED 10 17 3 cache
werkzeug pallets/werkzeug True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password publish.yaml ALL_SHA 7 7 1 cache
flask pallets/flask True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password publish.yaml ALL_SHA 21 21 5 cache
pynacl pyca/pynacl True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password pypi-publish.yml MIXED 2 24 4 cache
msgpack msgpack/msgpack-python True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password wheel.yml NONE 0 15 4 cache
pydantic-settings pydantic/pydantic-settings True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password ci.yml NONE 0 16 1 cache
poetry-core python-poetry/poetry True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password release.yaml ALL_SHA 20 20 5 cache
dnspython rthalley/dnspython True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password test-publish.yml NONE 0 12 3 cache
python-multipart Kludex/python-multipart True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password publish.yml NONE 0 10 3 cache
scikit-learn scikit-learn/scikit-learn True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password publish_pypi.yml MIXED 5 70 21 cache
joblib joblib/joblib True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password publish-to-pypi.yml NONE 0 17 3 cache
fonttools fonttools/fonttools True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password wheels.yml NONE 0 17 2 cache
jiter pydantic/jiter True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password ci.yml NONE 0 68 1 cache
threadpoolctl joblib/threadpoolctl True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password publish-to-pypi.yml NONE 0 9 1 cache
itsdangerous pallets/itsdangerous True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password publish.yaml ALL_SHA 20 20 4 cache
secretstorage mitya57/secretstorage True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password main.yml NONE 0 7 1 cache
chardet chardet/chardet True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password release.yml NONE 0 20 2 cache
orjson ijl/orjson True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password artifact.yaml NONE 0 41 3 cache
defusedxml tiran/defusedxml True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password pypi.yml NONE 0 11 2 cache
blinker pallets-eco/blinker True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password publish.yaml ALL_SHA 7 7 1 cache
pyproject-hooks pypa/pyproject-hooks True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password ci.yml NONE 0 7 1 cache
rapidfuzz rapidfuzz/RapidFuzz True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password releasebuild.yml NONE 0 29 5 cache
build pypa/build True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password cd.yml ALL_SHA 6 6 1 cache
pytest-asyncio pytest-dev/pytest-asyncio True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password main.yml ALL_SHA 23 23 1 cache
cycler matplotlib/cycler True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password release.yml MIXED 4 16 4 cache
setuptools-scm pypa/setuptools-scm True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password python-tests.yml ALL_SHA 35 35 6 cache
cloudpickle cloudpipe/cloudpickle True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password publish_to_pypi.yml NONE 0 22 2 cache
httplib2 httplib2/httplib2 True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password publish.yaml NONE 0 15 3 cache
marshmallow marshmallow-code/marshmallow True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password build-release.yml NONE 0 11 1 cache
babel python-babel/babel True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password ci.yml MIXED 3 12 1 cache
ipython ipython/ipython True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password publish.yml NONE 0 30 9 cache
docstring-parser rr-/docstring_parser True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password build.yml NONE 0 13 2 cache
aiofiles Tinche/aiofiles True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password pypi-package.yml NONE 0 17 2 cache
xmltodict martinblech/xmltodict True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password publish.yml NONE 0 4 1 cache
black psf/black True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password pypi_upload.yml ALL_SHA 69 69 13 cache
tornado tornadoweb/tornado True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password build.yml NONE 0 12 1 cache
matplotlib-inline ipython/matplotlib-inline True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password publish.yml MIXED 1 3 1 cache
mcp modelcontextprotocol/python-sdk True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password publish-pypi.yml ALL_SHA 36 36 9 cache
langchain-core langchain-ai/langchain True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password _release.yml MIXED 14 76 19 cache
cachecontrol psf/cachecontrol True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password release.yml ALL_SHA 3 3 1 cache
pytest-xdist pytest-dev/pytest-xdist True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password deploy.yml NONE 0 6 1 cache
pymongo mongodb/mongo-python-driver True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password release-python.yml MIXED 17 62 7 cache
awswrangler aws/aws-sdk-pandas True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password publish.yml NONE 0 4 1 cache
termcolor termcolor/termcolor True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password deploy.yml NONE 0 6 1 cache
aioitertools omnilib/aioitertools True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password ci.yml NONE 0 9 1 cache
xxhash ifduyue/python-xxhash True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password build.yml NONE 0 11 1 cache
dulwich dulwich/dulwich True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password python-distributions.yml NONE 0 28 5 cache
pyzmq zeromq/pyzmq True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password wheels.yml NONE 0 16 3 cache
dbt-adapters dbt-labs/dbt-adapters True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password publish-oss.yml MIXED 76 80 19 cache
pytest-mock pytest-dev/pytest-mock True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password deploy.yml NONE 0 12 2 cache
poetry python-poetry/poetry True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password release.yaml ALL_SHA 20 20 5 cache
dbt-common dbt-labs/dbt-common True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password release.yml MIXED 25 30 10 cache
dataclasses-json lidatong/dataclasses-json True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password pythonpackage.yml NONE 0 12 3 cache
slack-sdk slackapi/python-slack-sdk True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password pypi-release.yml ALL_SHA 20 20 4 cache
langsmith langchain-ai/langsmith-sdk True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password release.yml NONE 0 53 8 cache
cattrs python-attrs/cattrs True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password pypi-package.yml ALL_SHA 6 6 1 cache
pendulum sdispater/pendulum True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password release.yml ALL_SHA 21 21 3 cache
snowflake-sqlalchemy snowflakedb/snowflake-sqlalchemy True True True id-token:write, pypa/gh-action-pypi-publish python-publish.yml NONE 0 3 1 cache
datadog DataDog/datadogpy True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password release.yaml ALL_SHA 3 3 1 cache
cleo python-poetry/cleo True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password release.yaml ALL_SHA 13 13 4 cache
smart-open piskvorky/smart_open True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password release.yml NONE 0 7 2 cache
tinycss2 Kozea/tinycss2 True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password release.yml NONE 0 5 1 cache
loguru Delgan/loguru True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password packaging.yml NONE 0 19 5 cache
types-awscrt youtype/types-awscrt True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password publish_on_update.yml NONE 0 10 2 cache
botocore-stubs youtype/botocore-stubs True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password publish_on_update.yml NONE 0 10 2 cache
simplejson simplejson/simplejson True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password build-and-deploy.yml NONE 0 14 1 cache
jsonschema-path p1c2u/jsonschema-path True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password python-publish.yml NONE 0 4 1 cache
librt mypyc/librt True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password buildwheels.yml NONE 0 9 1 cache
typeguard agronholm/typeguard True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password publish.yml NONE 0 8 1 cache
opensearch-protobufs opensearch-project/opensearch-protobufs True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password publish-release.yml NONE 0 37 12 cache
toolz pytoolz/toolz True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password publish_pypi.yml ALL_SHA 8 8 1 cache
pbs-installer frostming/pbs-installer True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password release.yml NONE 0 5 1 cache
zope-interface zopefoundation/zope.interface True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password tests.yml MIXED 2 35 2 cache
argon2-cffi hynek/argon2-cffi True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password pypi-package.yml ALL_SHA 37 37 4 cache
pylint pylint-dev/pylint True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password release.yml MIXED 3 60 11 cache
colorlog borntyping/python-colorlog True True True id-token:write, pypa/gh-action-pypi-publish ci.yml NONE 0 7 1 cache
pathable p1c2u/pathable True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password python-publish.yml NONE 0 19 5 cache
llvmlite numba/llvmlite True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password upload_packages.yml MIXED 68 70 7 cache
ipython-pygments-lexers ipython/ipython-pygments-lexers True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password test.yml NONE 0 6 1 cache
langchain-openai langchain-ai/langchain True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password _release.yml MIXED 14 76 19 cache
asyncpg MagicStack/asyncpg True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password release.yml MIXED 2 27 2 cache
plotly plotly/plotly.py True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password test-release.yml NONE 0 10 2 cache
astroid pylint-dev/astroid True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password release.yml MIXED 2 21 5 cache
async-lru aio-libs/async-lru True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password ci-cd.yml NONE 0 23 4 cache
trio python-trio/trio True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password release.yml NONE 0 31 4 cache
humanize python-humanize/humanize True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password release.yml NONE 0 22 7 cache
beartype beartype/beartype True True True id-token:write, pypa/gh-action-pypi-publish python_release.yml NONE 0 21 3 cache
altair vega/altair True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password weekly.yml NONE 0 22 6 cache
pyee jfhbrook/pyee True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password release.yaml NONE 0 18 2 cache
polars pola-rs/polars True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password release-python.yml NONE 0 102 20 cache
absl-py abseil/abseil-py True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password pypi_upload.yml NONE 0 3 1 cache
send2trash arsenetar/send2trash True True True id-token:write, pypa/gh-action-pypi-publish, pypi-publish-no-password publish.yml ALL_SHA 13 13 3 cache
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment