Python package index · package record
Python 2 and 3 compatibility
One account can publish this package. That is a single point of failure with no advisory attached to it.