PyPI adds project archiving system to stop malicious updates
Informing users that no changes are anticipated, the Python Package Index (PyPI) has announced the launch of "Project Archival," a new method that enables publishers to archive their projects.
To assist users in making informed decisions regarding their dependencies, users will still be able to download the projects from PyPI, but they will be alerted of the maintenance state.
Because it is typical in the open-source community for developers to take over developer accounts and push malicious updates to popular but abandoned projects, the new functionality aims to strengthen supply-chain security read more about PyPI adds project archiving system to stop malicious updates.
Get up to date on the latest cybersecurity news and enhance your knowledge of cybersecurity with our thorough...