Seth Larson @sethmlarson.dev · Feb 7 /Everyone/ is trying their best, there's always more work to do than there is time for. I received this email reminder after publishing the latest release of "Truststore" about hardening our publish workflow. #python #pypi #opensource #oss #opensource #security
2 likes 1 replies
?
Replies
This is one of the improvements that PyPI implemented after the Ultralytics supply-chain attack last year to guide folks towards more secure publishing workflows (blog.pypi.org/posts/2024-1...) Thanks to the maintainers of PyPI for implementing this feature!