PyPI Security
PyPI Security

talkpython.fm PyPI Security
Do you worry about your developer / data science supply chain safety? All the packages for the Python ecosystem are much of what makes Python awesome. But the are also a bit of an open door to your code and machine. Luckily the PSF is taking this seriously and hired Mike Fiedler as the full time PyP...

There is a discussion on Hacker News, but feel free to comment here as well.