> If I understand correctly, the source code for building Python is not fetched directly from python.org. Not so sure how secure is that. python-build-standalo

> If I understand correctly, the source code for building Python is not fetched directly from python.org. Not so sure how secure is that. python-build-standalone fetches CPython sources directly from python.org[1]. I don't even know where else we would get them from! [1]: https://github.com/astral-sh/python-build-standalone/blob/a21e242a2521c3054867a1cc531b88ef555af366/pythonbuild/downloads.py https://github.com/astral-sh/python-build-standalone/blob/a2...