Tootfinder

🛡️ #Composer 2.11 is out. The headline feature is a cooldown dependency policy: newly published package versions are withheld for a configurable period before Composer installs them.
#PHP #supplychain

In a supply chain attack on the popular LiteLLM library in March this year, around 434,000 build pipelines – which were in use at more than 2,500 companies – are believed to have been compromised: #Python #ITSecurity #SupplyChain #LiteLLM