GitHub Dependabot and PyPI implement a Dependabot update cooldown and release file restrictions to mitigate software supply chain attacks. #GitHub #Dependabot #PyPI #Cybersecurity #SupplyChainSecurity https://meterpreter.org/dependabot-pypi-supply-chain-cooldown/?utm_source=mastodon&utm_medium=jetpack_social