News for hackers. Stuff that matters.
Re:3500 packages uploaded to PyPI, pointing to a malicious URL by ajarmst on Tuesday March 02, 2021 @12:27PM (#26317771)
I think you'll find the set of people simultaneously competent to maintain a python package and willing to take on potentially significant legal liability for free is too small to maintain a software ecosystem. This isn't necessarily bad: it means that the process of evaluating and securing code has tangible value and provides incentive to hire programmers or their consulting companies, which improves my odds of being able to feed my children in the future.

There are no comments on this comment yet.