Exploring the Cheese Shop - What's in the Python Package Index?
summary
An overview of the Python Package Index (PyPI): what it is, how packages get uploaded and who uploads them, risks and attack vectors from packages on PyPI and how to protect yourself, and options for running private PyPI repositories or mirrors for serving Python packages.
AI-written summary · about
related talks
24mInside the Cheeseshop:How Python Packaging Works
24mBuilding a Sustainable Python Package Index
10mPyPI Supply Chain Security
25m"Security considerations in Python Packaging"
18mMalicious Needle in a Haystack – PyPi Security Pitfalls
20mMalicious Needle in a Haystack - PyPi Security Pitfalls
29mCheese Must Stand: Defending the Python Library Ecosystem in 2025
29mMaking Python safer than ever