GitHub, PyPI add time-absed defenses against supply chain attacks
… PyPI blocks release poisoning with 14-day cutoff PyPI announced that it now blocks maintainers from adding new files to a package release after 14 days have passed since its publication. …
