Radar #4: Week of 11/18/2024

PyPI now supports digital attestations PyPI, the repository searched by the pip command for packages, announced it now supports digital attestations &#x2013; a method for cryptographically verifying a Python package to the repository it came from. This is generally a step in the right direction, but there have been discussions