PyPI adds project archiving system to stop malicious updates

PyPI introduced 'Project Archival,' a maintainer-controlled status that marks projects as archived and displays warnings to inform users of inactive maintenance, encouraging migration to actively maintained dependencies. Built on a LifecycleStatus model, it supports reversible archiving, recommends a final explanatory release, mitigates supply-chain risks like account takeovers, malicious updates to abandoned packages, and 'Revival Hijack' scenarios, and will be expanded with statuses such as deprecated, feature-complete, and unmaintained.