News for hackers. Stuff that matters.
Re:PGP signatures on PyPI: worse than useless by glyph on Sunday May 21, 2023 @02:03PM (#36023311)
Also, if you really want a "fancy checksum" for verifying package installs, there's already a better feature in pip that actually works and is well-supported: https://pip.pypa.io/en/stable/topics/secure-installs/

There are no comments on this comment yet.