Mastodon Feed: Post

Mastodon Feed

Boosted by andrewnez ("Andrew Nesbitt"):
Monorepo@fosstodon.org ("Jacob Coffee") wrote:

RE: https://mastodon.social/@andrewnez/117128355243322772

@andrewnez that phrasing came off more alarmist than we intended, so we've revised it. The risk isn't PyPI itself, but the gap in resources: The PSF needs more support to keep up the same high bar of service and quality as demand grows.

We encourage companies who rely on PyPI to financially support our security work for everyone's benefit.

i've adjusted the wording to clarify!
https://github.com/pypi/warehouse/commit/bc867eed