Anthropic Invests $1.5M in the Python Software Foundation and OSS Securitypyfound.blogspot.com 7miketheman7mo1 comment
PyPI: Trusted Publishing Growth, Now for GitLab Self-Managed and Organizationsblog.pypi.org 2miketheman10modiscuss
White Paper: Slippery Zips and Sticky Tar-Pits: Security and Archivesalpha-omega.dev 2miketheman10mo1 comment
Open Infrastructure Is Not Free: PyPI, the PSF, and Sustainabilitypyfound.blogspot.com 8miketheman10modiscuss
Datadog supports PyPI and the Python community through observabilityopensource.datadoghq.com 1miketheman11modiscuss
PyPI Blog: Token Exfiltration Campaign via GitHub Actions Workflowsblog.pypi.org 76miketheman11mo20 comments
Preventing ZIP parser confusion attacks on Python package installersblog.pypi.org 48miketheman1y17 comments