[19:51:50] <tpr> hi, I'm in process of uploading a new package to pypi, and was wondering what's the best approach to make that happen.
[19:52:44] <tpr> I'm planning to use tokens for pypi access, as I have done with my other, already existing packages. I'm scoping the tokens per project, but this is not possible for a non-existing package (and I couldn't find a way to create a package from the UI)
[19:53:38] <ngoldbaum> sounds like an oversight in the UI, maybe check the warehouse repo on github for an existing issue?
[19:53:44] <tpr> I'm going to use a global token to do that and revoke it afterwards, but maybe there should be a way to handle this?
[19:53:59] <ronny> tpr: i found this also limiting and uploaded a wheel for my own package once to claim the package name, now i can set up specific tokens
[19:54:01] <ngoldbaum> i think it'll work if you just upload the first version without a token or with a global token
[19:56:35] <PSFSlack> <di> there is an existing issue: https://github.com/pypa/warehouse/issues/6378
[20:00:07] <tpr> hmm, the "remove token" dialog requires typing something to the field (pw manager completed doesn't count) :)
[20:16:16] <tos9> tpr: heh, yes, I've noticed that too
[20:16:38] <tos9> (there's actually a few other minor password manager UX things in the UI I think)
[20:16:48] <tos9> e.g. the login form has a "third" tab in it for some hidden element
[20:17:09] <tos9> so password manager autocomplete gets confused (or did, mine, keepass, supports adding custom additional keystrokes, so I added an extra tab)
[20:17:52] <tpr> :) it's all good, the package is now up
[21:22:07] <toad_polo> tos9: Yeah, it's the "Show Password" box. It comes before the password in the tab order.
[21:23:20] <toad_polo> And yeah, the idea of adding a token that can only be used for creating new projects and then converts into a token scoped for the project you created is pretty much perfect.
[21:23:50] <toad_polo> Can't wait for that (though I may not be creating any new projects any time soon).