It isn’t any harder to publish without before this feature than it is now. In fact it’s easier, because I implemented generic API tokens for PyPI years before this feature, and the feature itself isn’t even tied to GitHub or any particular OIDC IdP. We just picked GitHub as the first external IdP because it is unambiguously the most popular one in the Python ecosystem.
Nobody needed generic API tokens for PyPI either. Not now, not years ago.
The problem isn't a technical one. The problem is that when a company / government body hears that the "official way to do X is Y", they'll create an internal policy to do Y all the time, regardless of how evil or stupid Y is.
You just destroyed a public good by making a bunch of organizations require the use of GitHub and other MS trash for no technical reason. You are a lot worse than a real estate developer who paved over a community park to build a parking lot for some mega corp. If people saw you doing this in a movie, it would've been so cartoonishly evil, the audience would think the director jumped a shark, yet, real life appears to be worse than the portrayal of evil in art.
> Nobody needed generic API tokens for PyPI either. Not now, not years ago.
It was one of the most-requested features on PyPI, but OK.
The rest of this is just ranting. I think you should develop some more perspective on this, and observe that nobody else is even remotely as bent out of shape as you are over these changes. Which, again, aren't even close to mandatory (and couldn't be even if anybody wanted them to be, which nobody does).
Most requested by whom? By PyPA members? -- these are some of the most useless people in the history of Python development. Python developer's mailing list that had people actually suggest anything useful for the future of the language / discuss features disappeared. Today, all decisions about Python are, essentially made behind closed doors by a group of people with no skill or ability, appointed to the job by MS.
> I think you should develop some more perspective on this
I think you are willfully ignorant, and are upset that I pointed out to you how bad was the thing that you've done. I really don't need a lecturing from some shallow mind that screwed up a lot of people out of their ignorance and unwillingness to educate themselves.
It isn’t any harder to publish without before this feature than it is now. In fact it’s easier, because I implemented generic API tokens for PyPI years before this feature, and the feature itself isn’t even tied to GitHub or any particular OIDC IdP. We just picked GitHub as the first external IdP because it is unambiguously the most popular one in the Python ecosystem.