pyup
Manage Python project dependencies by sending automated pull requests whenever a dependencies releases a new version
Potential remote code execution in PyPI
2021-08-02
PyPI packages caught stealing credit card numbers, Discord tokens
2021-07-31
Ask HN: What's Improving Behind the Radars
2021-07-31
Potential remote code execution in PyPI
2021-07-31
Are you biased in interviews? Yup
2021-07-30
Software downloaded 30k times from PyPI ransacked developers’ machines
2021-07-30
“We do not plan to publish the AWS CLI project to PyPI at this time”
2021-07-29
Product Hunt Sock Puppets?
2021-07-29
A Large-Scale Security-Oriented Static Analysis of Python Packages in PyPI
2021-07-29
State of DevOps Report
2021-07-25
