--- title: Python's PyPI Reveals Its Secrets | daily.dev description: GitGuardian's 2024 report highlights the presence of exposed secrets in PyPI, the Python Package Index. Open-source packages hosted in PyPI play a significant... canonical: https://daily.dev/posts/python-s-pypi-reveals-its-secrets-pc6syry7k twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Python's PyPI Reveals Its Secrets | daily.dev og:description: GitGuardian's 2024 report highlights the presence of exposed secrets in PyPI, the Python Package Index. Open-source packages hosted in PyPI play a significant... og:url: https://daily.dev/posts/python-s-pypi-reveals-its-secrets-pc6syry7k og:image: https://api.daily.dev/og/posts/pc6sYRy7k.png og:image:alt: Python's PyPI Reveals Its Secrets og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Python's PyPI Reveals Its Secrets **[Community Picks](https://daily.dev/sources/community)** · 4 min read · 4 upvotes · 0 comments ## Summary GitGuardian's 2024 report highlights the presence of exposed secrets in PyPI, the Python Package Index. Open-source packages hosted in PyPI play a significant role in production today, helping developers avoid reinventing the wheel. GitGuardian has identified common secrets like OpenAI API keys, Google API keys, and Google Cloud keys. It is crucial to avoid storing secrets in plain text in source code and to revoke leaked secrets to prevent unauthorized access. Implementing automations for secrets management is recommended. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: --- Tags: [#python](https://daily.dev/tags/python), [#gitguardian](https://daily.dev/tags/gitguardian), [#secrets-management](https://daily.dev/tags/secrets-management) [View this post on daily.dev](https://daily.dev/posts/python-s-pypi-reveals-its-secrets-pc6syry7k) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Python's PyPI Reveals Its Secrets","url":"https://daily.dev/posts/python-s-pypi-reveals-its-secrets-pc6syry7k","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/python-s-pypi-reveals-its-secrets-pc6syry7k"},"datePublished":"2024-04-11T11:42:22.536Z","dateModified":"2024-05-09T08:43:33.910Z","description":"GitGuardian's 2024 report highlights the presence of exposed secrets in PyPI, the Python Package Index. Open-source packages hosted in PyPI play a significant...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/f4ea80230157bc82afb615e32125e547?_a=AQAEufR","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/f4ea80230157bc82afb615e32125e547?_a=AQAEufR","isAccessibleForFree":true,"articleSection":"Community Picks","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Community Picks","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1655817725/logos/community","url":"https://daily.dev/sources/community"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/python-s-pypi-reveals-its-secrets-pc6syry7k","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":4},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"python,gitguardian,secrets-management","timeRequired":"PT4M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Community Picks","item":"https://daily.dev/sources/community"},{"@type":"ListItem","position":3,"name":"Python's PyPI Reveals Its Secrets"}]} ```