This is why PyPI recommends using Trusted Publishing (https://docs.pypi.org/trusted-publishers/ https://docs.pypi.org/trusted-publishers/) which removes the nee

This is why PyPI recommends using Trusted Publishing (https://docs.pypi.org/trusted-publishers/ https://docs.pypi.org/trusted-publishers/) which removes the need for long-lived tokens entirely.