PyPI now supports digital attestations(blog.pypi.org)207 points by miketheman 1 year ago | 160 comments
Analysis of supply-chain attack on Ultralytics(blog.pypi.org)79 points by SethMLarson 1 year ago | 18 comments
PyPI has completed its first security audit(blog.pypi.org)94 points by miketheman 2 years ago | 14 comments