zamlag·2 年前·議論At work we don't use PyPI any longer. We have our own set of curated packages, the security issues are just too great:https://developers.slashdot.org/story/24/09/15/0030229/fake-...https://jfrog.com/blog/revival-hijack-pypi-hijack-technique-...https://jfrog.com/blog/leaked-pypi-secret-token-revealed-in-...We consider switching to Java, C++ or Rust because of general quality issues with Python.
https://developers.slashdot.org/story/24/09/15/0030229/fake-...
https://jfrog.com/blog/revival-hijack-pypi-hijack-technique-...
https://jfrog.com/blog/leaked-pypi-secret-token-revealed-in-...
We consider switching to Java, C++ or Rust because of general quality issues with Python.