Implement private projects

• I have searched the issues of this repo and believe that this is not a duplicate.
• I have searched the documentation and believe that my question is not covered.

Feature Request

Currently poetry doesn’t support disabling publishing of package to remote repository. Add publish key similar to publish key present over cargo manifest for rust crates. publish key can have two types of value either bool or list of repository name. The publish field can be used to prevent a package from being published to a remote repository (like PYPI) by mistake, for instance to keep a package private in a company. If bool is present and is false then package cannot be published to any remote repository. Similarly if list of remote repository name is present then package can only be published to those remote repository.

[tool.poetry]
#....
publish=false

[tool.poetry]
#....
publish=["some-remote-repository-name"]

[alkasm]

Bumping this issue. Can we get any guidance or suggestions from the poetry team? Would be happy to work on this but again, I don’t know the right UX vision for poetry’s behavior here.

[sloev]

its really dangerous i cant disable this cuz’ 👇

if i have pypi configured globally then if i accidently run poetry publish in a repo it will publish my package to PYPI WTF!

please disable the publish command by default or let it recide in scripts, then we can also overwrite it if needed!!!

EDIT: i may have sounded very alarmist, but i still think its an issue