Comment

Comment by forsaken

One of the PyPI maintainers noted:

> This is a great approach to detecting malicious code execution in Python packages.

> ... anyone want to fund making this part of @pypi?

https://twitter.com/di_codes/status/1327121326734241797

I think this is an obvious place that someone in the ecosystem could apply money and make their supply chain (and everyone else's) safer.

parent forsaken 6 years ago

Discussion

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton