> PyPI has been ahead of the curve on implementing mitigations Indeed, crates.io implemented PyPI's trusted publishing and explicitly called out PyPI as their

> PyPI has been ahead of the curve on implementing mitigations Indeed, crates.io implemented PyPI's trusted publishing and explicitly called out PyPI as their inspiration: https://blog.rust-lang.org/2025/07/11/crates-io-development-update-2025-07/ https://blog.rust-lang.org/2025/07/11/crates-io-development-...