PyPI Was Subpoenaed
They log too much data about their users.<p>So they should promptly update their policies to a) stop logging so much, b) delete all past logs, and c) sharply limit the span of time until deletion of whatever logs they decide they really need to track for internal needs.<p>They should avoid logging, and rapidly rotate logs, to thwart future subpoenas from the total surveillance state.