Making "pip install" safer: learn about Python packaging

This session is facilitated by Sumana Harihareswara

Show on schedule

About this session

The Python programming language is super popular, and programmers use the Python Package Index pypi.org to share useful libraries and applications with users and other developers. How can you share your work on PyPI so people can “pip install” it? And how can you work with PyPI’s maintainers to increase the security of the whole platform (and reduce the risk of people downloading malware)? In this session we’ll work through this tutorial for novice packagers https://packaging.python.org/tutorials/distributing-packages/ and help current package maintainers harden their PyPI profiles. We’ll also discuss current efforts in cryptographic signing, malware detection, and logging that help keep PyPI and Python users secure.