Attestations: A new generation of signatures on PyPI | Hacker News Reader