You can count me among those that are suspicious that this is a frog-boiling step, but it doesn't
appear to me that STF money went to this, from
https://www.sovereign.tech/tech/python-package-index#what-ar...Maybe there is a case to be made for STF to fund making Codeberg (a German-headquartered organization) one of the PyPI trusted hosts. If Codeberg were supported, that would go a long way to addressing fears. And conversely, if Codeberg can't meet PyPI's bar, that suggests complete commercial capture.