Get the latest tech news
PyPI now supports digital attestations
Announcing support for PEP 740 on the Python Package Index
PyPI's support for digital attestations has three key advantages over regular cryptographic signatures, such as those provided by PGP: With support for PEP 740, PyPI only permits attestations with a verifiable signature to be uploaded and redistributed by the index. Support for work on PEP 740's authoring and design was provided by the Sovereign Tech Agency and the Google Open Source Security Team.
Or read this on Hacker News