Security Developer-in-Residence – Weekly Report #1
sethmlarson.dev
This critical role would not be possible without funding from the OpenSSF Alpha-Omega Project. Massive thank-you to Alpha-Omega for investing in the security of the Python ecosystem! Welcome...
  • Jim@programming.devEnglish
    2·
    1 year ago

    Really cool. This was sorely needed for a while, and I’m glad that someone is taking the mantle to provide this valuable service to the Python community. As Seth mentions in his previous post, supply chain attacks are becoming more concerning. Great that the PSF has hired someone specifically for these types of issues.

    • qwop@programming.devOPEnglish
      1·
      1 year ago

      Yeah definitely, I think there’s also funding secured for a PyPI Security Developer, and a Deputy Developer in Residence. Can’t remember exactly what the status on those two are, but definitely seems like there’s more good stuff to come! The PSF has been doing a great job it seems.