News for hackers. Stuff that matters.
Re:Telnyx v4.87.1 and v4.87.2 are compromised by TeamPCP by woodruffw on Saturday March 28, 2026 @06:38PM (#47558702)
Depends on what you mean by “this.” If you mean build provenance, yes, if you mean transmuting PyPI into the kind of trust topology that Debian (for example) has, no.

(I think PEP 740 largely succeeds at providing build provenance; having downstream tooling actually do useful things with that provenance is harder for mostly engineering coordination reasons.)

There are no comments on this comment yet.