News for hackers. Stuff that matters.
Re:Software downloaded 30k times from PyPI ransacked develop... by remram on Friday July 30, 2021 @10:49AM (#28008580)
crev is an open-source framework trying to fix this, using a web-of-trust approach to reviews: https://github.com/crev-dev/

Currently only available for Cargo, Rust's package manager, but more integrative are being developed.

There are no comments on this comment yet.