This page only shows if a package has been uploaded with attestations .The verified details (Changelog/Code/Issue tracker) are showing because they do use Trust

This page only shows if a package has been uploaded with attestations .The verified details (Changelog/Code/Issue tracker) are showing because they do use Trusted Publishing. However, they have not published a new version since the beginning of attestation support in PyPI. That's the meaning of the clock icon right to the package name. Their workflow responsible for publishing new releases [1] has support for attestations. Thus, it will turn green on this page with the next project release. [1] https://github.com/urllib3/urllib3/blob/main/.github/workflows/publish.yml#L94 https://github.com/urllib3/urllib3/blob/main/.github/workflo...