Re:LiteLLM Python package compromised by supply-chain attack
by MetaWhirledPeas on Tuesday March 24, 2026 @03:11PM
(#47507626)
This option is available already in the form of closed-source proprietary software.
If someone wants a package manager where all projects mandate verifiable ID that's fine, but I don't see that getting many contributors. And I also don't see that stopping people using fraudulent IDs.
If someone wants a package manager where all projects mandate verifiable ID that's fine, but I don't see that getting many contributors. And I also don't see that stopping people using fraudulent IDs.