Skip to content
Our audit of PyPI
blog.trailofbits.com | blog | #supply-chain | #open-source | #pypi | #python | #audit | #trail-of-bits | #warehouse
Summary
Trail of Bits audited Warehouse and cabotage, the codebases behind PyPI, finding non-critical issues affecting integrity and availability, mostly where services interact with weak contracts.
- Published
- Collected