2 ms·

PyPI is also subject to supply chain attacks. What do you mean?