Get the latest tech news

What's missing to have reproducible builds on PyPI


While writing the section of my 2026 Python Packaging Council (PPC) nomination on secure supply chain, I realized that one thing related to having a secure supply chain that we lack is a defined way to perform reproducible builds. The reason I like the idea of making reproducible builds work

None

Get the Android app

Or read this on Hacker News

Read more on:

Photo of PyPI

PyPI

Photo of reproducible builds

reproducible builds

Related news:

News photo

Anthropic's Claude breached 3 orgs, uploaded PyPI malware during tests

News photo

Claude uploaded malware to PyPI in Anthropic's botched test

News photo

GitHub, PyPI add time-based defenses against supply chain attacks