PEP 763: Limiting deletions on PyPI

[woodruffw (William Woodruff)]

@ncoghlan

Without the per-project flag, the feature couldn’t be turned on for any project until the quota management issues were resolved, which doesn’t seem like a desirable outcome.

That’s a good point! With that in mind, maybe a staged process makes the most sense?

1. First, all new projects created after a certain time have the deletion rules applied to them;
2. Then, all pre-existing projects below either a relative (50%?) or absolute (<2.5GB?) quota usage have the rules applied;
3. Finally, once a stable quota management solution is in place, all projects have it enabled (and all project-specific flagging goes away).

This has the benefit of an incremental rollout, although it makes it slightly harder to communicate the change to users (since different groups/projects will receive the change at different times). I suppose that’s not too different from what happened with MFA, though