News for hackers. Stuff that matters.
Re:Dozens of malicious PyPI packages discovered targeting de... by woodruffw on Wednesday November 02, 2022 @02:22PM (#33440557)
It's not going to be a "blue checkmark" per se, but we're currently working on integrating Sigstore signatures into PyPI. The idea there will be that you'll be able to verify that a package's distributions are signed with an identity that you trust (for example, your public email address, GitHub repository name, or GitHub handle).

There are no comments on this comment yet.