Google launches OSS Rebuild to catch open source malware and verify sketchy packages
Google’s OSS Rebuild helps detect open source supply chain attacks by rebuilding packages and verifying integrity without burdening maintainers.
PyPI
Google’s OSS Rebuild helps detect open source supply chain attacks by rebuilding packages and verifying integrity without burdening maintainers.