Worth Reading
- #tooling
- #security
- #open-source
PyPI Enhances Supply Chain Security: No More Uploads to Old Releases
PyPI now rejects new file uploads to releases older than 14 days. This measure prevents poisoning of stable releases if publishing tokens are compromised.