There is a path to signing code in python, many large projects don't bother, the tools don't encourage anyone to notice or care that packages are not even signed.
#pip #pypi #python
https://dzone.com/articles/package-signing-in-pip-it-works-in-a-roundabout-so
The epic solarwind hack involved hacking & forging code signatures. For pypi this is trivial because almost no one even signs code.
♡ 0 ↻ 0