Post

Scientific Python's nightly upload action is adopting pixi + grype: reproducible envs plus built-in vulnerability scanning in the release pipeline. Supply-chain security showing up right where maintainers already work. github.com/scientific-...