miketheman

Recent Submissions

1. 1. ▲ PyPI Blog: Releases now reject new files after 14 days (blog.pypi.org) 81 points · 3 days ago · 48 comments
2. 2. ▲ PyPI has completed its second audit (blog.pypi.org) 6 points · 3 months ago · 0 comments
3. 3. ▲ Anthropic Invests $1.5M in the Python Software Foundation and OSS Security (pyfound.blogspot.com) 7 points · 6 months ago · 1 comment
4. 4. ▲ PyPI in 2025: A Year in Review (blog.pypi.org) 79 points · 6 months ago · 42 comments
5. 5. ▲ PyPI and Shai-Hulud: Staying Secure Amid Emerging Threats (blog.pypi.org) 3 points · 8 months ago · 0 comments
6. 6. ▲ PyPI: Trusted Publishing Growth, Now for GitLab Self-Managed and Organizations (blog.pypi.org) 2 points · 8 months ago · 0 comments
7. 7. ▲ White Paper: Slippery Zips and Sticky Tar-Pits: Security and Archives (alpha-omega.dev) 2 points · 8 months ago · 1 comment
8. 8. ▲ Open Infrastructure Is Not Free: PyPI, the PSF, and Sustainability (pyfound.blogspot.com) 8 points · 8 months ago · 0 comments
9. 9. ▲ Datadog supports PyPI and the Python community through observability (opensource.datadoghq.com) 1 point · 9 months ago · 0 comments
10. 10. ▲ PyPI Blog: Token Exfiltration Campaign via GitHub Actions Workflows (blog.pypi.org) 76 points · 10 months ago · 20 comments