Good news!
New York University -- specifically Professor Justin Cappos -- and I
have successfully asked the US National Science Foundation for a grant
to improve Python packaging security. The NSF is awarding NYU $800,000
over two years -- from mid-2021 to mid-2023 -- to further improve the
pip dependency resolver and to integrate The Update Framework further
into the packaging toolchain.
https://nsf.gov/awardsearch/showAward?AWD_ID=2054692&HistoricalAwards=false
For what we're planning to do, what this means in the short term, an
explanation of why NYU and the NSF are involved, and thank-yous, please
see https://discuss.python.org/t/new-packaging-security-funding-nyu/7792 .
--
Sumana Harihareswara
Changeset Consulting
https://changeset.nyc
--
Distutils-SIG mailing list -- distutils-sig@python.org
To unsubscribe send an email to distutils-sig-le...@python.org
https://mail.python.org/mailman3/lists/distutils-sig.python.org/
Message archived at
https://mail.python.org/archives/list/distutils-sig@python.org/message/MUH254XTCE5EUL5YJV7ZD6HSUYNFXUD6/
