Open source security at Astral

Creators of uv share their take on open-source security in the age of AI. Lots of interesting rabbit-hole links, explaining security aspects like impostor commits, unpinned uses, immutable releases, dependency cooldowns, and more.