Hacker News new | ask | show | jobs
by halfblood1010 76 days ago
I built trustcheck, a Python CLI that evaluates the trust posture of a PyPI release before it is installed, promoted or approved. trustcheck is currently in BETA and I am looking for real-world testing and feedback to help move it toward production-grade stability. If you are working with PyPI packages, supply-chain security or CI pipelines, I would really appreciate you trying it out and sharing your experience.