I interpreted the headline as protection against malicious packages. Having read the article, and being clearly not familiar enough with publishing on PyPi, I actually have not much idea what it is: maybe a different way to authenticate when publishing your package?
Would you mind summarising in layman's terms please? And does this have any relevance to package manager trust and security?
Would you mind summarising in layman's terms please? And does this have any relevance to package manager trust and security?