3 ms·
Plus: - This plan is for commercial projects. - License: Commercial License - security maillist - quick responses - private PyPI - commercial support - m
by qwertox 3y ago
Plus:
- This plan is for commercial projects.
- License: Commercial License
- security maillist
- quick responses
- private PyPI
- commercial support
- making Authlib sustainable
then:
- We offer a private PyPI server to release early security fixes and features.
Don't they rely on the entire PyPI community to offer their product? Holding security fixes back in exchange for money doesn't look fair to me from this perspective.
- _8j50 3y agoIt's for 1-day attacks I'd imagine. Especially for python, once the patch is public threat actors can abuse it but they can embargo the cve and offer private patches for commercial customers early to avoid that scenario.