-
The question of typosquatting as a threat vector occasionally comes up in discussion of open publication platforms like PyPI, and while I generally agree with [this post](https://gist.github.com/seldo…
-
NextDNS has the following security features, why the same can't be develop for adguard home?
- DNS Rebinding Protection
- IDN Homograph Attacks Protection
- Typosquatting Protection
- Domain Gen…
-
**What's the problem this feature will solve?**
Prevent malicious packages being published with typo'ish names
**Describe the solution you'd like**
I'd like to propose an algorithm that blocks ma…
-
# 💡 Summary #
"chirp" is already registered as a package name on PYPI, meaning someone may erroneously believe they're installing CISA's CHIRP but end up with https://pypi.org/project/chirp/ instea…
d33bs updated
3 years ago
-
### Description
Hi again, I'd like to suggest another security practice recommended by the [OpenSSF Scorecard][scorecard-repo] which is to hash pin dependencies to prevent dependency-confusion, typ…
-
### Description
I would like to suggest a security practice recommended by the [OpenSSF Scorecard][scorecard-repo] which is to hash pin dependencies to prevent dependency-confusion, typosquatting a…
-
It took me some time to realize this is spelled `depcheck` and not `deepcheck` (because of “DEPendency”, I still read “deepcheck” though). I guess other developers will also do that mistake. To avoid …
-
### Required prerequisites
- [X] Make sure you've read the [documentation](https://pybind11.readthedocs.io). Your issue may be addressed there.
- [X] Search the [issue tracker](https://github.com/pyb…
-
-
Lot of very good list are already available for free for ads-blockers list.
As most are very well formatted/structured, importing them as an ~ad-blocker-url
would be a nice addition.
Rather than rec…