Anthropic Invests $1.5M in the Python Software Foundation and OSS Securitypyfound.blogspot.com·7 pts·miketheman·1
PyPI: Trusted Publishing Growth, Now for GitLab Self-Managed and Organizationsblog.pypi.org·2 pts·miketheman·0
White Paper: Slippery Zips and Sticky Tar-Pits: Security and Archivesalpha-omega.dev·2 pts·miketheman·1
Open Infrastructure Is Not Free: PyPI, the PSF, and Sustainabilitypyfound.blogspot.com·8 pts·miketheman·0
Datadog supports PyPI and the Python community through observabilityopensource.datadoghq.com·1 pts·miketheman·0
PyPI Blog: Token Exfiltration Campaign via GitHub Actions Workflowsblog.pypi.org·76 pts·miketheman·20
Preventing ZIP parser confusion attacks on Python package installersblog.pypi.org·48 pts·miketheman·17