PyPI now supports digital attestations(blog.pypi.org)207 points by miketheman 1 year ago | 160 comments
PyPI has completed its first security audit(blog.pypi.org)94 points by miketheman 2 years ago | 14 comments
PyPI Preventing Domain Resurrection Attacks(blog.pypi.org)111 points by pabs3 1 year ago | 45 comments
PyPI Blog: Token Exfiltration Campaign via GitHub Actions Workflows(blog.pypi.org)64 points by miketheman 1 year ago | 18 comments