Re:Dozens of malicious PyPI packages discovered targeting de...
by woodruffw on Wednesday November 02, 2022 @02:22PM
(#33440557)
It's not going to be a "blue checkmark" per se, but we're currently working on integrating Sigstore signatures into PyPI. The idea there will be that you'll be able to verify that a package's distributions are signed with an identity that you trust (for example, your public email address, GitHub repository name, or GitHub handle).
[ Parent
| on HN ]
There are no comments on this comment yet.