Incident Report: LiteLLM/Telnyx supply-chain attacks, with guidance - The Python Package Index Blog
Python Package Index shares insights and provides guidance following LiteLLM/Telnyx supply-chain attacks
Resolution
docs.astral.shuv is an extremely fast Python package and project manager, written in Rust.
A year of uv: pros, cons, and should you migrate
Yes, probably.
Python Supply Chain Security Made Easy
Wire pip-audit into your CI and unit tests to automatically block known vulnerable dependencies.
uv is all you need
Consolidate your Python environment with uv, the one tool to rule them all.
Package Managers Need to Cool Down
A survey of dependency cooldown support across package managers and update tools.
GitHub - astral-sh/setup-uv: Set up your GitHub Actions workflow with a specific version of https://docs.astral.sh/uv/
Set up your GitHub Actions workflow with a specific version of https://docs.astral.sh/uv/ - astral-sh/setup-uv
Open source security at Astral
Insights and guidance from our engineering team on how Astral secures its tools.
Package Managers Need to Cool Down
A survey of dependency cooldown support across package managers and update tools.