Tag

python-packaging

Safeguard articles tagged "python-packaging" — guides, analysis, and best practices for software supply chain and application security.

1 article

Open Source Security

How to publish a secure Python package: signing, SBOMs, and trusted publishing

PyPI enforced two-factor authentication for all users on January 1, 2024 — but 2FA alone doesn't stop a stolen API token. Here's the full secure-publishing stack.

Jul 8, 20267 min read