Untitled attachment

Notices where this attachment appears

1. Embed this notice
   Seth Larson (sethmlarson@fosstodon.org)'s status on Saturday, 08-Feb-2025 08:19:04 JST Seth Larson

   /Everyone/ is trying their best, there's always more work to do than there is time for.

   I received this email reminder after publishing the latest release of "Truststore" about hardening our publish workflow. This is one of the improvements that PyPI implemented after the Ultralytics supply-chain attack last year to guide folks towards more secure publishing workflows (https://blog.pypi.org/posts/2024-12-11-ultralytics-attack-analysis/).

   #python #pypi #oss #opensource #security