Trusted publishing: a new benchmark for PyPI packaging security | Hacker News Reader