root/pypi: links for phish-safe