Is PyPI moving towards a subscription model or abandoning package neutrality?