Comment Comment by f311a Their previous release would be easily caught by static analysis. PTH is a novel technique.Run all your new dependencies through static analysis and don't install the latest versions.I implemented static analysis for Python that detects close to 90% of such injections.https://github.com/rushter/hexora parent f311a 7 months ago
Run all your new dependencies through static analysis and don't install the latest versions.
I implemented static analysis for Python that detects close to 90% of such injections.
https://github.com/rushter/hexora