---
id: 1603
title: "Our audit of PyPI"
source_domain: blog.trailofbits.com
source_url: "https://blog.trailofbits.com/2023/11/14/our-audit-of-pypi/"
published_at: "2023-11-14T13:00:37Z"
tags: ["supply-chain", "open-source", "pypi", "python", "audit", "trail-of-bits", "warehouse"]
phying_url: "https://phying.com/item/1603"
lang: en
---

# Our audit of PyPI

## Summary

Trail of Bits audited Warehouse and cabotage, the codebases behind PyPI, finding non-critical issues affecting integrity and availability, mostly where services interact with weak contracts.

## Intelligence Metadata

- **Sources:** blog.trailofbits.com
- **Published:** 2023-11-14T13:00:37Z
- **Original:** https://blog.trailofbits.com/2023/11/14/our-audit-of-pypi/
- **Phying News:** https://phying.com/item/1603