Comment by spencerchubb

companies that actually care about security have a more secure solution and don't allow devs to use pypi