FlagThis

ImgSrc: blog.pypi.org

References :

• blog.pypi.org: PyPI now supports digital attestations
• simonwillison.net: PyPI now supports digital attestations
• The Trail of Bits Blog: Blog post from Trail of Bits discussing the new digital attestations feature on PyPI.
• simonwillison.net: Simon Willison's blog post discussing the new PyPI digital attestations feature.

Classification:

• HashTags: #PythonSecurity #SupplyChainSecurity #PyPI
• Company: PyPI
• Target: Python Packages
• Product: Python
• Feature: Digital Attestations
• Type: Research
• Severity: Informative