Improving security and integrity of Python package archives

Improving security and integrity of Python package archives

PSF white paper details archive vulnerabilities undermining Python package integrity and recommends enhancing security in ZIP and tar implementations and reproducible builds.