2 ms·
A lot of companies would pay actual money for some semblance of supply-chain security. Hosted, verified, certified Python dependencies. This is how Red Hat ma
by VWWHFSfQ 4y ago
A lot of companies would pay actual money for some semblance of supply-chain security. Hosted, verified, certified Python dependencies. This is how Red Hat made all their money in Linux. Something like "use our vetted and secure pypi instead of the free-for-all full of typo squaters and package takeovers that the public pypi.org offers."
Starting with some nice developer tooling and going from there doesn't seem crazy at all.
- prisonguard 4y ago> A lot of companies would pay actual money for some semblance of supply-chain security. After the core-js debacle[0] earlier this year, it was evident that alot of companies actually do not care care about supply-chain security. Those that do will happily roll their own hosted repositories that provide little to no guarantees. [0] https://github.com/zloirock/core-js/blob/master/docs/2023-02-14-so-whats-next.md https://github.com/zloirock/core-js/blob/master/docs/2023-02...
- BiteCode_dev 4y agoThat's Anaconda's business model.