GitHub and PyPI Implement New Supply Chain Security Policies
July 27, 2026
1 min read
5 views
cybersecurity
news
GitHub's Dependabot now enforces a three-day cooldown for pull requests, while PyPI has implemented a policy to reject file uploads for releases older than 14 days.
Was this article helpful?
0 found this helpful