News for hackers. Stuff that matters.
Re:Telnyx v4.87.1 and v4.87.2 are compromised by TeamPCP by functional_dev on Saturday March 28, 2026 @01:32PM (#47556666)
wasnt PEP 740 an attempt to solve this?
Re:Telnyx v4.87.1 and v4.87.2 are compromised by TeamPCP by woodruffw on Saturday March 28, 2026 @06:38PM (#47558702)
Depends on what you mean by “this.” If you mean build provenance, yes, if you mean transmuting PyPI into the kind of trust topology that Debian (for example) has, no.

(I think PEP 740 largely succeeds at providing build provenance; having downstream tooling actually do useful things with that provenance is harder for mostly engineering coordination reasons.)