GitHub and PyPI (Python Package Index) have introduced a
time-based mechanism in the Dependabot dependency management tool
to protect against supply-chain attacks and to limit their impact.
[...]
GitHub, PyPI add time-absed defenses against supply chain attacks
Pensée du jour :
Ce que l'homme a fait ,
l'homme peut le défaire.
"No secure path in the world"
