Our audit of PyPI | Trail of Bits Blog

Linking pages

PyPI has completed its first security audit - The Python Package Index https://blog.pypi.org/posts/2023-11-14-1-pypi-completes-first-security-audit/ 22 comments

Linked pages

PyPI · The Python Package Index https://pypi.org 269 comments
Push Notification Service - Amazon Simple Notification Service (SNS) - AWS http://aws.amazon.com/sns/ 99 comments
Introducing 'Trusted Publishers' - The Python Package Index https://blog.pypi.org/posts/2023-04-20-introducing-trusted-publishers/ 93 comments
Amazon S3 - Cloud Object Storage - AWS http://aws.amazon.com/s3/ 31 comments
PyPI has completed its first security audit - The Python Package Index https://blog.pypi.org/posts/2023-11-14-1-pypi-completes-first-security-audit/ 22 comments
Introducing PyPI Organizations - The Python Package Index https://blog.pypi.org/posts/2023-04-23-introducing-pypi-organizations/ 9 comments
PyPI Download Stats https://pypistats.org/packages/__all__ 2 comments
Python Software Foundation News: Welcome to the Warehouse! http://pyfound.blogspot.com/2016/01/welcome-to-warehouse.html 0 comments
OTF | Supporting Internet Freedom Worldwide https://www.opentech.fund/ 0 comments
A new package index for Python [LWN.net] https://lwn.net/Articles/751458/ 0 comments
What the fork: Imposter Commits in GitHub Actions and CI/CD https://www.chainguard.dev/unchained/what-the-fork-imposter-commits-in-github-actions-and-ci-cd 0 comments
GitHub now scans public issues for PyPI secrets - The Python Package Index https://blog.pypi.org/posts/2023-08-17-github-token-scanning-for-public-repos/ 0 comments
PEP 503 – Simple Repository API | peps.python.org https://peps.python.org/pep-0503/ 0 comments