Trusted publishing: a new benchmark for PyPI packaging securityblog.trailofbits.com2 pointsakeck3 years ago