Timely, given the recent PyPI breach and Rails/Ruby YAML parsing vulnerabilities.