Python packaging and runtimes harden supply chains
An extremely fast Python package and project manager written in Rust that updates managed CPython builds and certificate stores.
Bundles python-build-standalone 20261021 with Python security patches and removes compromised eMudhra root certificates via rustls-webpki.
A modern runtime for JavaScript and TypeScript with built-in bundling, testing, and strict security defaults.
Distrusts compromised eMudhra certificate authorities and fixes dynamic import permission checks for compiled binaries.
Engineering teams must audit certificate trust stores and upgrade runtimes immediately. These releases eliminate severe supply chain risks stemming from compromised certificate authorities while updating interpreter baselines across production environments; teams should validate it before adoption.
The same card posted on social. Open it for the full size.
