5 ms·For what it's worth, Debian packagers check signatures when downloading from PyPI.by progval 4y agoFor what it's worth, Debian packagers check signatures when downloading from PyPI.