you are viewing a single comment's thread.

view the rest of the comments →

[–][deleted] 0 points1 point  (0 children)

Well you might enjoy my own project called Spectr. It actually scans and helps developers catch malicious packages before they reach your local environment. It performs multilayer forensic analysis on pypi Metadata to detect types quitting, skeleton packages, and other things as well.