"Anthropic is entering into a two-year partnership with the Python Software Foundation. The company is investing a total of $1.5 million in the security and further support of the Python ecosystem. With this contribution, the Foundation aims to take steps in the field of software security. In particular, this concerns the core of the programming language and the infrastructure that developers worldwide rely on."
"The Python Software Foundation is working on new automated methods to proactively analyze packages on PyPI, rather than only intervening after problems are discovered. By also building a dataset of known malware, the foundation can develop analysis tools that recognize suspicious patterns more quickly. This approach is expected to be useful not only for Python, but also for other open source ecosystems."
Anthropic is investing $1.5 million over two years in the Python Software Foundation to enhance security and support for the Python ecosystem. A significant portion will improve CPython and the Python Package Index, prioritizing protection against software-supply-chain attacks. The Foundation will develop automated, proactive analysis for PyPI packages and build a dataset of known malware to accelerate detection of suspicious patterns, with potential applicability to other open-source ecosystems. Specialized developers and security engineers will implement the security roadmap, complemented by Alpha-Omega funding. Additional funding will support structural development, grants and programs, and PyPI infrastructure management, reflecting Python’s growing importance.
Read at Techzine Global
Unable to calculate read time
Collection
[
|
...
]